HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NtFrs\Parameters\Backup/Restore [17 1]
;
; Misc params
;
    Process at Startup [17 1]
        BurFlags = REG_DWORD 0xd2