

最基础根：HKEY_LOCAL_MACHINE

[SOFTWARE\rising]
   [SOFTWARE\rising\disable]
   [SOFTWARE\rising\MiniStore]
   |___值名称:Dir.WinSXS.LastFile    值类型:REG_BINARY                  值:
   |___值名称:Vol.c.LastFile         值类型:REG_BINARY                  值:
   |___值名称:Dir.System32.LastFile   值类型:REG_BINARY                  值:
   |___值名称:Vol.d.LastFile         值类型:REG_BINARY                  值:
   |___值名称:Dir.Program.LastFile   值类型:REG_BINARY                  值:
   |___值名称:Vol.e.LastFile         值类型:REG_BINARY                  值:
   |___值名称:Vol.f.LastFile         值类型:REG_BINARY                  值:
   [SOFTWARE\rising\perflog]
   [SOFTWARE\rising\REC]
   |___值名称:InstallPath            值类型:REG_SZ                      值:C:\Program Files (x86)\Rising\REC
   |___值名称:DataPath               值类型:REG_SZ                      值:C:\ProgramData\Rising\REC
   |___值名称:libver13               值类型:REG_SZ                      值:34.1123.0001
   |___值名称:libtime13              值类型:REG_SZ                      值:2022-11-23 02:54:11
   |___值名称:Version                值类型:REG_SZ                      值:3.0.50.32
   |___值名称:UpdateTime             值类型:REG_SZ                      值:2022-11-22 21:11:52
   |___值名称:autotest               值类型:REG_DWORD                   值:0
   |___值名称:LastUseMode            值类型:REG_DWORD                   值:1
   [SOFTWARE\rising\rpt]
   |___值名称:bsi                    值类型:REG_DWORD                   值:1
   |___值名称:hrpv                   值类型:REG_DWORD                   值:1
   |___值名称:nsrp                   值类型:REG_DWORD                   值:1
   [SOFTWARE\rising\rscommon]
   |___值名称:datapath               值类型:REG_SZ                      值:C:\ProgramData\Rising\common


MoveFileEx Reg : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations

\??\C:\ProgramData\Alibaba\AlibabaProtectDT\SelfPTDB.dat
