Registry Access to the Windows Registry File system Access to the file system RegOpenKey Is a run/runonce registry key opened? 2 EqualSubString Run CreateFile Print 1st CreateFile argument 1 PrintString Registry run/runonce Registry startup method (run/runonce) CreateFile file access Accesses the following file: