REG_QUERY_VALUE_KEY_INFORMATION - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// wdm.h
typedef struct _REG_QUERY_VALUE_KEY_INFORMATION {
PVOID Object;
PUNICODE_STRING ValueName;
KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass;
PVOID KeyValueInformation;
ULONG Length;
PULONG ResultLength;
PVOID CallContext;
PVOID ObjectContext;
PVOID Reserved;
} REG_QUERY_VALUE_KEY_INFORMATION, *PREG_QUERY_VALUE_KEY_INFORMATION;
View the official Windows Driver Kit DDI referenceNo description available.
The REG_QUERY_VALUE_KEY_INFORMATION structure contains information about a registry key's value entry that is being queried.
ObjectA pointer to the registry key object for the key whose value entry is being queried.
ValueNameA pointer to a UNICODE_STRING structure that contains the name of the value entry to retrieve information for.
KeyValueInformationClassThe KEY_VALUE_INFORMATION_CLASS value that indicates the type of information to be returned by the system.
KeyValueInformationA pointer to a buffer that contains the information to be returned by the system. The format of the buffer depends on the value of KeyValueInformationClass. For more information see KEY_VALUE_INFORMATION_CLASS.
LengthThe size, in bytes, of the KeyValueInformation buffer.
ResultLengthA pointer to a variable that receives (from the system) the amount of valid data, in bytes, in the KeyValueInformation buffer.
CallContextOptional driver-defined context information that the driver's RegistryCallback routine can supply. This member is defined for Windows Vista and later versions of the Windows operating system.
ObjectContextA pointer to driver-defined context information that the driver has associated with a registry object by calling CmSetCallbackObjectContext. This member is defined for Windows Vista and later versions of the Windows operating system.
ReservedThis member is reserved for future use. This member is defined for Windows Vista and later versions of the Windows operating system.
The system passes this structure to a RegistryCallback routine every time a thread attempts to query a value entry for a key—for example, when a user-mode thread calls RegQueryValue or RegQueryValueEx or when a driver calls ZwDeleteKey.
For more information about registry filtering operations, see Filtering Registry Calls.