#ifndef _NTREGAPI_H

/**
 * Returns three ULONGs of key metadata for KeyFlagsInformation (12 bytes).
 * Wow64Flags is key metadata, not the KEY_WOW64_32KEY/KEY_WOW64_64KEY access mask;
 * the ordinary nontransactional getter reads its low 4 bits. KeyFlags
 * reports REG_FLAG_VOLATILE/REG_FLAG_LINK. ControlFlags contains REG_KEY_* bits
 * from a separate low-4-bit control field. This query does not change key state.
 * A short buffer returns STATUS_BUFFER_TOO_SMALL and required length 12.
 */
typedef struct _KEY_FLAGS_INFORMATION
{
    ULONG Wow64Flags;
    ULONG KeyFlags; // REG_FLAG_*
    ULONG ControlFlags; // REG_KEY_*
} KEY_FLAGS_INFORMATION, *PKEY_FLAGS_INFORMATION;

#endif
View code on GitHub