Rob Shearman : ntdll: Set the DataLength field of the information field in NtQueryValueKey to how much data should be returned , not what was actually returned.