#ifndef _NTREGAPI_H

/**
 * The KEY_VALUE_BASIC_INFORMATION structure defines a subset of the full information available for a value entry of a registry key.
 * \sa https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/ns-wdm-_key_value_basic_information
 */
typedef struct _KEY_VALUE_BASIC_INFORMATION
{
    ULONG TitleIndex;
    ULONG Type;
    ULONG NameLength;
    _Field_size_bytes_(NameLength) WCHAR Name[1];
} KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;

#endif
View code on GitHub

// wdm.h

typedef struct _KEY_VALUE_BASIC_INFORMATION {
  ULONG TitleIndex;
  ULONG Type;
  ULONG NameLength;
  WCHAR Name[1];
} KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
View the official Windows Driver Kit DDI reference

NtDoc

This structure is documented in Windows Driver Kit.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-wdm-_key_value_basic_information)

_KEY_VALUE_BASIC_INFORMATION structure

Description

The KEY_VALUE_BASIC_INFORMATION structure defines a subset of the full information available for a value entry of a registry key.

Members

`TitleIndex`

Device and intermediate drivers should ignore this member.

`Type`

Specifies the system-defined type for the value entry in the registry key, which is one of the following:

REG_XXX type	Value
REG_BINARY	Binary data in any form
REG_DWORD	A 4-byte numerical value
REG_DWORD_LITTLE_ENDIAN	A 4-byte numerical value whose least significant byte is at the lowest address
REG_DWORD_BIG_ENDIAN	A 4-byte numerical value whose least significant byte is at the highest address
REG_EXPAND_SZ	A null-terminated Unicode string, containing unexpanded references to environment variables, such as "%PATH%"
REG_LINK	A Unicode string naming a symbolic link. This type is irrelevant to device and intermediate drivers
REG_MULTI_SZ	An array of null-terminated strings, terminated by another zero
REG_NONE	Data with no particular type
REG_SZ	A null-terminated Unicode string
REG_RESOURCE_LIST	A device driver's list of hardware resources, used by the driver or one of the physical devices it controls, in the \ResourceMap tree
REG_RESOURCE_REQUIREMENTS_LIST	A device driver's list of possible hardware resources it or one of the physical devices it controls can use, from which the system writes a subset into the \ResourceMap tree
REG_FULL_RESOURCE_DESCRIPTOR	A list of hardware resources that a physical device is using, detected and written into the \HardwareDescription tree by the system
REG_QWORD	An 8-byte numerical value
REG_QWORD_LITTLE_ENDIAN	An 8-byte numerical value whose least significant byte is at the lowest address

`NameLength`

Specifies the size in bytes of the following value entry name.

`Name`

A string of Unicode characters naming a value entry of the key.

Remarks

A kernel-mode driver can obtain a KEY_VALUE_BASIC_INFORMATION that describes a registry key by calling the ZwQueryValueKey or ZwEnumerateValueKey routine.

KEY_VALUE_BASIC_INFORMATION - NtDoc