IRP
MDL
Expand Minimize

REG_QUERY_VALUE_KEY_INFORMATION structure

The REG_QUERY_VALUE_KEY_INFORMATION structure contains information about a registry key's value entry that is being queried.

Syntax


typedef struct _REG_QUERY_VALUE_KEY_INFORMATION {
  PVOID                       Object;
  PUNICODE_STRING             ValueName;
  KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass;
  PVOID                       KeyValueInformation;
  ULONG                       Length;
  PULONG                      ResultLength;
  PVOID                       CallContext;
  PVOID                       ObjectContext;
  PVOID                       Reserved;
} REG_QUERY_VALUE_KEY_INFORMATION, *PREG_QUERY_VALUE_KEY_INFORMATION;

Members

Object

A pointer to the registry key object for the key whose value entry is being queried.

ValueName

A pointer to a UNICODE_STRING structure that contains the name of the value entry to retrieve information for.

KeyValueInformationClass

The KEY_VALUE_INFORMATION_CLASS value that indicates the type of information to be returned by the system.

KeyValueInformation

A pointer to a buffer that contains the information to be returned by the system. The format of the buffer depends on the value of KeyValueInformationClass. For more information see KEY_VALUE_INFORMATION_CLASS.

Length

The size, in bytes, of the KeyValueInformation buffer.

ResultLength

A pointer to a variable that receives (from the system) the amount of valid data, in bytes, in the KeyValueInformation buffer.

CallContext

Optional driver-defined context information that the driver's RegistryCallback routine can supply. This member is defined for Windows Vista and later versions of the Windows operating system.

ObjectContext

A pointer to driver-defined context information that the driver has associated with a registry object by calling CmSetCallbackObjectContext. This member is defined for Windows Vista and later versions of the Windows operating system.

Reserved

This member is reserved for future use. This member is defined for Windows Vista and later versions of the Windows operating system.

Remarks

The system passes this structure to a RegistryCallback routine every time a thread attempts to query a value entry for a key—for example, when a user-mode thread calls RegQueryValue or RegQueryValueEx or when a driver calls ZwDeleteKey.

For more information about registry filtering operations, see Filtering Registry Calls.

Requirements

Version

Available on Microsoft Windows XP and later versions of the Windows operating system.

Header

Wdm.h (include Wdm.h, Ntddk.h, or Ntifs.h)

See also

CmSetCallbackObjectContext
RegistryCallback
ZwDeleteKey
ZwQueryValueKey

 

 

Send comments about this topic to Microsoft

Show:
© 2015 Microsoft