Undocumented functions of NTDLL

2OO1, 2O February



KEY_MULTIPLE_VALUE_INFORMATION
KEY_MULTIPLE_VALUE_INFORMATION

typedef struct _KEY_MULTIPLE_VALUE_INFORMATION {


  PUNICODE_STRING         ValueName;
  ULONG                   DataLength;
  ULONG                   DataOffset;
  ULONG                   Type;


} KEY_MULTIPLE_VALUE_INFORMATION, *PKEY_MULTIPLE_VALUE_INFORMATION;



Structure KEY_MULTIPLE_VALUE_INFORMATION is used with function NtQueryMultipleValueKey.


  • ValueName
    •     Pointer to UNICODE_STRING structure containing value name. If specified value not exist, function fails.
  • DataLength
    •     Length of value's data, in bytes.
  • DataOffset
    •     Offset in output buffer (declared in NtQueryMultipleValueKey) to value's data.
  • Type
    •     Type of queried value.


    On entry caller must specify ValueName parameter, and set other to zero. Function NtQueryMultipleValueKey fills rest of fields with informations about specified value.


    Documented by:
    Tomasz Nowak



    Requirements:
    Library: ntdll.lib


    See also:
    NtQueryMultipleValueKey