Dmitry Timoshkov : ntdll: RtlpNtQueryValueKey takes 5 parameters.