KEY_VALUE_ENTRY - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTREGAPI_H

typedef struct _KEY_VALUE_ENTRY
{
    PUNICODE_STRING ValueName;
    ULONG DataLength;
    ULONG DataOffset;
    ULONG Type;
} KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;

#endif

View code on GitHub
// wdm.h

typedef struct _KEY_VALUE_ENTRY {
  PUNICODE_STRING ValueName;
  ULONG           DataLength;
  ULONG           DataOffset;
  ULONG           Type;
} KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
View the official Windows Driver Kit DDI reference

NtDoc

This structure is documented in Windows Driver Kit.

Windows Driver Kit DDI reference (ns-wdm-_key_value_entry)

_KEY_VALUE_ENTRY structure

Description

The KEY_VALUE_ENTRY structure is used by the REG_QUERY_MULTIPLE_VALUE_KEY_INFORMATION structure to describe a single value entry for a registry key.

Members

ValueName

Pointer to a UNICODE_STRING structure that contains the name of the value entry.

DataLength

Specifies the size, in bytes, of the data for the value entry.

DataOffset

Specifies the offset, in bytes, of the value entry's data within the buffer that is pointed to by the ValueBuffer member of REG_QUERY_MULTIPLE_VALUE_KEY_INFORMATION.

Type

Specifies the type of the value entry's data. For a description of the possible values for Type, see the Type parameter of ZwSetValueKey.

Remarks

The ValueEntries member of REG_QUERY_MULTIPLE_VALUE_KEY_INFORMATION points to an array of KEY_VALUE_ENTRY structures.

See also

REG_QUERY_MULTIPLE_VALUE_KEY_INFORMATION

ZwSetValueKey