NtQueryMultipleValueKey - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTREGAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
NtQueryMultipleValueKey(
    _In_ HANDLE KeyHandle,
    _Inout_updates_(EntryCount) PKEY_VALUE_ENTRY ValueEntries,
    _In_ ULONG EntryCount,
    _Out_writes_bytes_(*BufferLength) PVOID ValueBuffer,
    _Inout_ PULONG BufferLength,
    _Out_opt_ PULONG RequiredBufferLength
    );

#endif

View code on GitHub
#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwQueryMultipleValueKey(
    _In_ HANDLE KeyHandle,
    _Inout_updates_(EntryCount) PKEY_VALUE_ENTRY ValueEntries,
    _In_ ULONG EntryCount,
    _Out_writes_bytes_(*BufferLength) PVOID ValueBuffer,
    _Inout_ PULONG BufferLength,
    _Out_opt_ PULONG RequiredBufferLength
    );

#endif

View code on GitHub

This function is documented in Windows SDK.


Function NtQueryMultipleValueKey returns data of one or more values under specified Key Object.

KeyHandle

HANDLE to Key Object opened with KEY_READ access.

ValuesList

Array of KEY_MULTIPLE_VALUE_INFORMATION structures contains names of values to query.

NumberOfValues

Number of members in ValueList array.

DataBuffer

User's allocated buffer receiving queried value's data.

BufferLength

Pointer to value specifying length of DataBuffer, in bytes.

RequiredLength

Optionally pointer to value receiving required DataBuffer length, in bytes.

Documented by

See also