The KEY_VALUE_BASIC_INFORMATION structure defines a subset of the full information available for a value entry of a registry key.
typedef struct _KEY_VALUE_BASIC_INFORMATION {
ULONG TitleIndex;
ULONG Type;
ULONG NameLength;
WCHAR Name[1]; // Variable size
} KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
| REG_XXX Type | Value | |
|---|---|---|
| REG_BINARY | Binary data in any form | |
| REG_DWORD | A 4-byte numerical value | |
| REG_DWORD_LITTLE_ENDIAN | A 4-byte numerical value whose least significant byte is at the lowest address | |
| REG_DWORD_BIG_ENDIAN | A 4-byte numerical value whose least significant byte is at the highest address | |
| REG_EXPAND_SZ | A zero-terminated Unicode string, containing unexpanded references to environment variables, such as “%PATH%” | |
| REG_LINK | A Unicode string naming a symbolic link. This type is irrelevant to device and intermediate drivers | |
| REG_MULTI_SZ | An array of zero-terminated strings, terminated by another zero | |
| REG_NONE | Data with no particular type | |
| REG_SZ | A zero-terminated Unicode string | |
| REG_RESOURCE_LIST | A device driver’s list of hardware resources, used by the driver or one of the physical devices it controls, in the \ResourceMap tree | |
| REG_RESOURCE _REQUIREMENTS_LIST |
A device driver’s list of possible hardware resources it or one of the physical devices it controls can use, from which the system writes a subset into the \ResourceMap tree | |
| REG_FULL_RESOURCE _DESCRIPTOR |
A list of hardware resources that a physical device is using, detected and written into the \HardwareDescription tree by the system | |
Defined in wdm.h and ntddk.h. Include wdm.h or ntddk.h.
KEY_VALUE_FULL_INFORMATION, KEY_VALUE_INFORMATION_CLASS, KEY_VALUE_PARTIAL_INFORMATION, ZwEnumerateValueKey, ZwQueryValueKey