KEY_VALUE_BASIC_INFORMATION - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
#ifndef _NTREGAPI_H
/**
* The KEY_VALUE_BASIC_INFORMATION structure defines a subset of the full information available for a value entry of a registry key.
* \sa https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/ns-wdm-_key_value_basic_information
*/
typedef struct _KEY_VALUE_BASIC_INFORMATION
{
ULONG TitleIndex;
ULONG Type;
ULONG NameLength;
_Field_size_bytes_(NameLength) WCHAR Name[1];
} KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
View code on GitHub// wdm.h
typedef struct _KEY_VALUE_BASIC_INFORMATION {
ULONG TitleIndex;
ULONG Type;
ULONG NameLength;
WCHAR Name[1];
} KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
View the official Windows Driver Kit DDI referenceThis structure is documented in Windows Driver Kit.
The KEY_VALUE_BASIC_INFORMATION structure defines a subset of the full information available for a value entry of a registry key.
TitleIndexDevice and intermediate drivers should ignore this member.
TypeSpecifies the system-defined type for the value entry in the registry key, which is one of the following:
| REG_XXX type | Value | |
|---|---|---|
| REG_BINARY | Binary data in any form | |
| REG_DWORD | A 4-byte numerical value | |
| REG_DWORD_LITTLE_ENDIAN | A 4-byte numerical value whose least significant byte is at the lowest address | |
| REG_DWORD_BIG_ENDIAN | A 4-byte numerical value whose least significant byte is at the highest address | |
| REG_EXPAND_SZ | A null-terminated Unicode string, containing unexpanded references to environment variables, such as "%PATH%" | |
| REG_LINK | A Unicode string naming a symbolic link. This type is irrelevant to device and intermediate drivers | |
| REG_MULTI_SZ | An array of null-terminated strings, terminated by another zero | |
| REG_NONE | Data with no particular type | |
| REG_SZ | A null-terminated Unicode string | |
| REG_RESOURCE_LIST | A device driver's list of hardware resources, used by the driver or one of the physical devices it controls, in the \ResourceMap tree | |
| REG_RESOURCE_REQUIREMENTS_LIST | A device driver's list of possible hardware resources it or one of the physical devices it controls can use, from which the system writes a subset into the \ResourceMap tree | |
| REG_FULL_RESOURCE_DESCRIPTOR | A list of hardware resources that a physical device is using, detected and written into the \HardwareDescription tree by the system | |
| REG_QWORD | An 8-byte numerical value | |
| REG_QWORD_LITTLE_ENDIAN | An 8-byte numerical value whose least significant byte is at the lowest address |
NameLengthSpecifies the size in bytes of the following value entry name.
NameA string of Unicode characters naming a value entry of the key.
A kernel-mode driver can obtain a KEY_VALUE_BASIC_INFORMATION that describes a registry key by calling the ZwQueryValueKey or ZwEnumerateValueKey routine.