VfZwQueryValueKey

INT64 __stdcall VfZwQueryValueKey(
        VOID *KeyHandle,
        UNICODE_STRING *ValueName,
        KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
        VOID *KeyValueInformation,
        UINT64 Length,
        UINT64 *ResultLength){
  PVOID retaddr; 
  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckUnicodeString(ValueName, retaddr);
    ViZwCheckVirtualAddress((UINT64)KeyValueInformation, retaddr);
    ViZwCheckVirtualAddress((UINT64)ResultLength, retaddr);
  }
  return((__int64(__fastcall *)(VOID *, UNICODE_STRING *, _QWORD, VOID *, _DWORD, UINT64 *))pXdvZwQueryValueKey)(
           KeyHandle,
           ValueName,
           (unsigned int)KeyValueInformationClass,
           KeyValueInformation,
           Length,
           ResultLength);
}

Referenced by: