"Registry" "File system" "RegOpenKey" 2 EqualSubString "Run" "CreateFile" 1 PrintString 1 "Registry startup method (run/runonce)" 2 2 "Accesses the following file:"