//0x4 bytes (sizeof)
enum _REG_NOTIFY_CLASS
{
RegNtDeleteKey = 0,
RegNtPreDeleteKey = 0,
RegNtSetValueKey = 1,
RegNtPreSetValueKey = 1,
RegNtDeleteValueKey = 2,
RegNtPreDeleteValueKey = 2,
RegNtSetInformationKey = 3,
RegNtPreSetInformationKey = 3,
RegNtRenameKey = 4,
RegNtPreRenameKey = 4,
RegNtEnumerateKey = 5,
RegNtPreEnumerateKey = 5,
RegNtEnumerateValueKey = 6,
RegNtPreEnumerateValueKey = 6,
RegNtQueryKey = 7,
RegNtPreQueryKey = 7,
RegNtQueryValueKey = 8,
RegNtPreQueryValueKey = 8,
RegNtQueryMultipleValueKey = 9,
RegNtPreQueryMultipleValueKey = 9,
RegNtPreCreateKey = 10,
RegNtPostCreateKey = 11,
RegNtPreOpenKey = 12,
RegNtPostOpenKey = 13,
RegNtKeyHandleClose = 14,
RegNtPreKeyHandleClose = 14,
RegNtPostDeleteKey = 15,
RegNtPostSetValueKey = 16,
RegNtPostDeleteValueKey = 17,
RegNtPostSetInformationKey = 18,
RegNtPostRenameKey = 19,
RegNtPostEnumerateKey = 20,
RegNtPostEnumerateValueKey = 21,
RegNtPostQueryKey = 22,
RegNtPostQueryValueKey = 23,
RegNtPostQueryMultipleValueKey = 24,
RegNtPostKeyHandleClose = 25,
RegNtPreCreateKeyEx = 26,
RegNtPostCreateKeyEx = 27,
RegNtPreOpenKeyEx = 28,
RegNtPostOpenKeyEx = 29,
RegNtPreFlushKey = 30,
RegNtPostFlushKey = 31,
RegNtPreLoadKey = 32,
RegNtPostLoadKey = 33,
RegNtPreUnLoadKey = 34,
RegNtPostUnLoadKey = 35,
RegNtPreQueryKeySecurity = 36,
RegNtPostQueryKeySecurity = 37,
RegNtPreSetKeySecurity = 38,
RegNtPostSetKeySecurity = 39,
RegNtCallbackObjectContextCleanup = 40,
RegNtPreRestoreKey = 41,
RegNtPostRestoreKey = 42,
RegNtPreSaveKey = 43,
RegNtPostSaveKey = 44,
RegNtPreReplaceKey = 45,
RegNtPostReplaceKey = 46,
MaxRegNtNotifyClass = 47
};