KEY_VALUE_PARTIAL_INFORMATION - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTREGAPI_H

/**
 * The KEY_VALUE_PARTIAL_INFORMATION structure contains a value's type and data without its name.
 * \remarks Data begins at offset 0x0c. Required capacity is 12 + DataLength bytes; the declaration's
 * trailing array element and compiler padding are not an additional wire-format header.
 * DataLength remains the full size on STATUS_BUFFER_OVERFLOW even when only a data prefix fits.
 * Data is returned as stored; REG_SZ/REG_MULTI_SZ tags do not guarantee valid termination.
 * \sa https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/ns-wdm-_key_value_partial_information
 */
typedef struct _KEY_VALUE_PARTIAL_INFORMATION
{
    ULONG TitleIndex;
    ULONG Type;
    ULONG DataLength;
    _Field_size_bytes_(DataLength) UCHAR Data[1];
} KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;

#endif

View code on GitHub
// wdm.h

typedef struct _KEY_VALUE_PARTIAL_INFORMATION {
  ULONG TitleIndex;
  ULONG Type;
  ULONG DataLength;
  UCHAR Data[1];
} KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
View the official Windows Driver Kit DDI reference

NtDoc

This structure is documented in Windows Driver Kit.

Windows Driver Kit DDI reference (ns-wdm-_key_value_partial_information)

_KEY_VALUE_PARTIAL_INFORMATION structure

Description

The KEY_VALUE_PARTIAL_INFORMATION structure defines a subset of the value information available for a value entry of a registry key.

Members

TitleIndex

Device and intermediate drivers should ignore this member.

Type

Specifies the system-defined type for the registry value in the Data member. For a summary of these types, see KEY_VALUE_BASIC_INFORMATION.

DataLength

The size in bytes of the Data member.

Data

A value entry of the key.

See also

KEY_VALUE_BASIC_INFORMATION

KEY_VALUE_FULL_INFORMATION

KEY_VALUE_INFORMATION_CLASS

ZwEnumerateValueKey

ZwQueryValueKey