pValue->Buffer = (PWSTR)ExAllocatePool(PagedPool, pBuffer->DataLength);

NTSTATUS Reg_GetStringValue(IN HANDLE hKey, IN LPCWSTR pszValueName, OUT PUNICODE_STRING pValue)
{
    NTSTATUS status = STATUS_SUCCESS;
    UNICODE_STRING ValueName;
    RtlInitUnicodeString(&ValueName, pszValueName);
    ULONG ResultLength = 0;
    status = ZwQueryValueKey(hKey, &ValueName, KeyValuePartialInformation, NULL, 0, &ResultLength);

    if (status == STATUS_OBJECT_NAME_NOT_FOUND || ResultLength == 0)
    {
        KdPrint(("注册表键值不存在！\n"));
        return CUSTOM_STATUS_REGISTRY_KEY_NOTEXIST;
    }
    KEY_VALUE_PARTIAL_INFORMATION *pBuffer = 
        (PKEY_VALUE_PARTIAL_INFORMATION)ExAllocatePool(PagedPool, ResultLength);
    if (pBuffer)
    {
        status = ZwQueryValueKey(hKey, &ValueName, KeyValuePartialInformation, pBuffer, ResultLength, &ResultLength);
        if (pBuffer->Type != REG_SZ)
        {
            KdPrint(("注册表键值类型不匹配！\n"));
            return CUSTOM_STATUS_REGISTRY_KEYVALUE_TYPEMISMATCH;
        }
        pValue->Buffer = (PWSTR)ExAllocatePool(PagedPool, pBuffer->DataLength);
        if (pValue->Buffer)
        {
            pValue->MaximumLength = (USHORT)pBuffer->DataLength;
            pValue->Length = pValue->MaximumLength-2;
            RtlMoveMemory(pValue->Buffer, pBuffer->Data, pBuffer->DataLength);
        }
        else
        {
            return STATUS_INSUFFICIENT_RESOURCES;
        }
        ExFreePool(pBuffer);
    }
    else
    {
        return STATUS_INSUFFICIENT_RESOURCES;
    }

    return STATUS_SUCCESS;
}