Missing probe and capture of user mode memory in NtUserSystemParametersInfo

In r 72626 NtUserSystemParametersInfo was corrected to properly check the contents of the user mode buffer for a lot of SPI cases. However this is done in the wrong way because we deference pvParam without probing and capturing the user mode buffer first (when needed).