

HKEY_LOCAL_MACHINE

[SOFTWARE\rising]
   [SOFTWARE\rising\disable]
   [SOFTWARE\rising\ESM]
   |___ֵ:LastUseMode            ֵ:REG_DWORD                   ֵ:1
   [SOFTWARE\rising\MiniStore]
   |___ֵ:Vol.c.LastFile         ֵ:REG_BINARY                  ֵ:
   |___ֵ:Dir.WinSXS.LastFile    ֵ:REG_BINARY                  ֵ:
   |___ֵ:Vol.d.LastFile         ֵ:REG_BINARY                  ֵ:
   |___ֵ:Vol.f.LastFile         ֵ:REG_BINARY                  ֵ:
   |___ֵ:Dir.System32.LastFile   ֵ:REG_BINARY                  ֵ:
   |___ֵ:Vol.e.LastFile         ֵ:REG_BINARY                  ֵ:
   |___ֵ:Dir.Program.LastFile   ֵ:REG_BINARY                  ֵ:
   [SOFTWARE\rising\perflog]
   [SOFTWARE\rising\REC]
   |___ֵ:InstallPath            ֵ:REG_SZ                      ֵ:D:\\Rising\REC
   |___ֵ:DataPath               ֵ:REG_SZ                      ֵ:C:\ProgramData\Rising\REC
   |___ֵ:Version                ֵ:REG_SZ                      ֵ:3.0.1.10
   |___ֵ:UpdateTime             ֵ:REG_SZ                      ֵ:2022-02-17 11:05:21
   |___ֵ:autotest               ֵ:REG_DWORD                   ֵ:0
   |___ֵ:LastUseMode            ֵ:REG_DWORD                   ֵ:1
   |___ֵ:libver13               ֵ:REG_SZ                      ֵ:34.0216.0001
   |___ֵ:libtime13              ֵ:REG_SZ                      ֵ:2022-02-16 11:22:06
   [SOFTWARE\rising\rpt]
   |___ֵ:bsi                    ֵ:REG_DWORD                   ֵ:1
   |___ֵ:hrpv                   ֵ:REG_DWORD                   ֵ:1
   |___ֵ:nsrp                   ֵ:REG_DWORD                   ֵ:1
   [SOFTWARE\rising\rscommon]
   |___ֵ:datapath               ֵ:REG_SZ                      ֵ:C:\ProgramData\Rising\common


MoveFileEx Reg : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations

