ZwQueryMultipleValueKey

It’s been one of those weeks, so it could be me, but am I right in stating
that this isn’t exported from the kernel - despite being prototyped in
wdm.h?

I’ve tried ordinary linking (Win7 i386 & x64) and MmGetSystemRoutineAddress
(Win7 SP1 Beta).

But, like I say - it could be me since it *has* been one of those weeks…


Rod Widdowson
Consulting Partner
Steading System Software LLP
+44 1368 850217 +1 508 915 4790

It isn’t exported.

NtQueryMultipleValueKey is in the SSDT and there is a
ZwQueryMultipleValueKey function, but it isn’t exported.

Would RtlQueryRegistryValues work instead?

On Sat, Oct 9, 2010 at 10:54 AM, Rod Widdowson wrote:
> It’s been one of those weeks, so it could be me, but am I right in stating
> that this isn’t exported from the kernel - despite being prototyped in
> wdm.h?
>
> I’ve tried ordinary linking (Win7 i386 & x64) and MmGetSystemRoutineAddress
> (Win7 SP1 Beta).
>
> But, like I say - it could be me since it has been one of those weeks…
>
>
> –
> Rod Widdowson
> Consulting Partner
> Steading System Software LLP
> +44 1368 850217 +1 508 915 4790
>
> —
> NTFSD is sponsored by OSR
>
> For our schedule of debugging and file system seminars
> (including our new fs mini-filter seminar) visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>