You've inherited a service with no tests. What do you write first?

Asked to justify an order rather than list test types. The strongest answer tied it to what breaks most often and what is hardest to fix in production.