#ifndef _NTREGAPI_H

/**
 * The KEY_VALUE_PARTIAL_INFORMATION_ALIGN64 structure contains the 8-byte-aligned partial-value query format.
 * \remarks Unlike KEY_VALUE_PARTIAL_INFORMATION, this format has no TitleIndex: Type is at offset 0,
 * DataLength at offset 4, and Data at offset 8. Required capacity is 8 + DataLength bytes.
 * KeyValuePartialInformationAlign64 is query-only. DataLength remains
 * the complete data size on overflow; it is not a safe copy length without a capacity check.
 */
typedef DECLSPEC_ALIGN(8) struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64
{
    ULONG Type;
    ULONG DataLength;
    _Field_size_bytes_(DataLength) UCHAR Data[1];
} KEY_VALUE_PARTIAL_INFORMATION_ALIGN64, *PKEY_VALUE_PARTIAL_INFORMATION_ALIGN64;

#endif
View code on GitHub