KEY_NODE_INFORMATION structure (wdm.h)
The KEY_NODE_INFORMATION structure defines the basic information available for a registry (sub)key.
Syntax
typedef struct _KEY_NODE_INFORMATION {
LARGE_INTEGER LastWriteTime;
ULONG TitleIndex;
ULONG ClassOffset;
ULONG ClassLength;
ULONG NameLength;
WCHAR Name[1];
} KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
Members
LastWriteTime
The last time this key or any of its values changed. This time value is expressed in absolute system time format. Absolute system time is the number of 100-nanosecond intervals since the start of the year 1601 in the Gregorian calendar.
TitleIndex
Device and intermediate drivers should ignore this member.
ClassOffset
The byte offset from the start of this structure to the class name string, which is located in the Name array immediately following the key name string. Like the key name string, the class name string is not null-terminated.
ClassLength
The size, in bytes, in the class name string.
NameLength
The size, in bytes, of the key name string contained in the Name array.
Name[1]
An array of wide characters that contains the name of the registry key. This character string is not null-terminated. Only the first element in this array is included in the KEY_NODE_INFORMATION structure definition. The storage for the remaining elements in the array immediately follows this element.
Remarks
The ZwEnumerateKey and ZwQueryKey routines use the KEY_NODE_INFORMATION structure to contain the registry key name and key class name. When the KeyInformationClass parameter of either routine is KeyNodeInformation, the KeyInformation buffer is treated as a KEY_NODE_INFORMATION structure. For more information about the KeyNodeInformation enumeration value, see KEY_INFORMATION_CLASS.
Requirements
| Requirement | Value |
|---|---|
| Header | wdm.h (include Wdm.h, Ntddk.h, Ntifs.h) |