#ifndef _NTREGAPI_H
/**
* The KEY_FULL_INFORMATION structure defines information available for a registry key, including subkeys, names and value entries.
* \sa https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/ns-wdm-_key_full_information
*/
typedef struct _KEY_FULL_INFORMATION
{
LARGE_INTEGER LastWriteTime;
ULONG TitleIndex;
ULONG ClassOffset;
ULONG ClassLength;
ULONG SubKeys;
ULONG MaxNameLength;
ULONG MaxClassLength;
ULONG Values;
ULONG MaxValueNameLength;
ULONG MaxValueDataLength;
WCHAR Class[1];
} KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
View code on GitHub// wdm.h
typedef struct _KEY_FULL_INFORMATION {
LARGE_INTEGER LastWriteTime;
ULONG TitleIndex;
ULONG ClassOffset;
ULONG ClassLength;
ULONG SubKeys;
ULONG MaxNameLen;
ULONG MaxClassLen;
ULONG Values;
ULONG MaxValueNameLen;
ULONG MaxValueDataLen;
WCHAR Class[1];
} KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
View the official Windows Driver Kit DDI referenceThis structure is documented in Windows Driver Kit.
The KEY_FULL_INFORMATION structure defines the information available for a registry key, including information about its subkeys and the maximum length for their names and value entries. This information can be used to size buffers to get the names of subkeys and their value entries.
LastWriteTimeThe last time this key or any of its values changed. This time value is expressed in absolute system time format. Absolute system time is the number of 100-nanosecond intervals since the start of the year 1601 in the Gregorian calendar.
TitleIndexDevice and intermediate drivers should ignore this member.
ClassOffsetThe byte offset from the start of this structure to the Class member.
ClassLengthThe size, in bytes, of the key class name string in the Class array.
SubKeysThe number of subkeys for this key.
MaxNameLenThe maximum size, in bytes, of any name for a subkey.
MaxClassLenThe maximum size, in bytes, of a class name.
ValuesThe number of value entries for this key.
MaxValueNameLenThe maximum size, in bytes, of a value entry name.
MaxValueDataLenThe maximum size, in bytes, of a value entry data field.
ClassAn array of wide characters that contains the name of the class of the key. This character string is not null-terminated. Only the first element in this array is included in the KEY_FULL_INFORMATION structure definition. The storage for the remaining elements in the array immediately follows this element.
The ZwEnumerateKey and ZwQueryKey routines use the KEY_FULL_INFORMATION structure to contain the full information for a registry key. When the KeyInformationClass parameter of either routine is KeyFullInformation, the KeyInformation buffer is treated as a KEY_FULL_INFORMATION structure. For more information about the KeyFullInformation enumeration value, see KEY_INFORMATION_CLASS.
KEY_VIRTUALIZATION_INFORMATION