Windows Driver Kit: Kernel-Mode Driver Architecture
REG_UNLOAD_KEY_INFORMATION

The REG_UNLOAD_KEY_INFORMATION structure contains information that a driver's RegistryCallback routine can use when a registry hive is unloaded.

typedef struct _REG_UNLOAD_KEY_INFORMATION {
  PVOID  Object;
  PVOID  UserEvent;
  PVOID  CallContext;
  PVOID  ObjectContext;
  PVOID  Reserved;
} REG_UNLOAD_KEY_INFORMATION, *PREG_UNLOAD_KEY_INFORMATION;

Members

Object
A pointer to a pointer to the registry key object for the key to be unloaded.
UserEvent
A pointer to an event object.
CallContext
Optional driver-defined context information that the driver's RegistryCallback routine can supply. This member is defined for Windows Vista and later versions of the operating system.
ObjectContext
A pointer to driver-defined context information that the driver has associated with a registry object by calling CmSetCallbackObjectContext. This member is defined for Windows Vista and later versions of the operating system.
Reserved
This member is reserved for future use. This member is defined for Windows Vista and later versions of the operating system.

Comments

The system passes the REG_UNLOAD_KEY_INFORMATION structure to the RegistryCallback routine every time a thread attempts to unload a key—for example, when a user-mode thread calls RegUnloadKey.

Requirements

Versions: Available for Windows Vista and later operating system versions.

Headers: Declared in Wdm.h. Include Wdm.h, Ntddk.h, or Ntifs.h.

See Also

CmSetCallbackObjectContext, RegistryCallback

Tags :


Page view tracker