The Windows Registry API is an incomplete wrapper over the NT Registry API. One glaring problem with it is that the windows API uses null-terminated string, whereas the NT API (and the underlying file format) use length-prefixed strings. This means you can effectively hide keys and values from software using the normal Windows API.