判断文件是否签名

来源:互联网 发布:淘宝卖家能花呗支付 编辑:程序博客网 时间:2024/05/21 21:01
#include <wincrypt.h>
#include <Mscat.h>
#include <Softpub.h>

#pragma comment(lib, "crypt32.lib")
#pragma comment(lib, "Wintrust.lib")

BOOL CheckFileTrust(LPCWSTR lpFileName)
{
        BOOL bRet = FALSE;
        WINTRUST_DATA wd = { 0 };
       WINTRUST_FILE_INFO wfi = { 0 };
       WINTRUST_CATALOG_INFO wci = { 0 };
       CATALOG_INFO ci = { 0 };

       HCATADMIN hCatAdmin = NULL;
       if ( !CryptCATAdminAcquireContext( &hCatAdmin, NULL, 0 ) )
       {
           return FALSE;
       }

      HANDLE hFile = CreateFileW( lpFileName, GENERIC_READ, FILE_SHARE_READ,
      NULL, OPEN_EXISTING, 0, NULL );
      if ( INVALID_HANDLE_VALUE == hFile )
     {
        CryptCATAdminReleaseContext( hCatAdmin, 0 );
        return FALSE;
     }

     DWORD dwCnt = 100;
     BYTE byHash[100];
      CryptCATAdminCalcHashFromFileHandle( hFile, &dwCnt, byHash, 0 );
      CloseHandle( hFile );

      LPWSTR pszMemberTag = new WCHAR[dwCnt * 2 + 1];
      for ( DWORD dw = 0; dw < dwCnt; ++dw )
      {
            wsprintfW( &pszMemberTag[dw * 2], L"%02X", byHash[dw] );
      }

     HCATINFO hCatInfo = CryptCATAdminEnumCatalogFromHash( hCatAdmin,
     byHash, dwCnt, 0, NULL );
    if ( NULL == hCatInfo )
    {
         wfi.cbStruct       = sizeof( WINTRUST_FILE_INFO );
         wfi.pcwszFilePath  = lpFileName;
         wfi.hFile          = NULL;
         wfi.pgKnownSubject = NULL;

          wd.cbStruct            = sizeof( WINTRUST_DATA );
         wd.dwUnionChoice       = WTD_CHOICE_FILE;
         wd.pFile               = &wfi;
        wd.dwUIChoice          = WTD_UI_NONE;
       wd.fdwRevocationChecks = WTD_REVOKE_NONE;
       wd.dwStateAction       = WTD_STATEACTION_IGNORE;
       wd.dwProvFlags         = WTD_SAFER_FLAG;
       wd.hWVTStateData       = NULL;
        wd.pwszURLReference    = NULL;
   }
   else
  {
       CryptCATCatalogInfoFromContext( hCatInfo, &ci, 0 );
        wci.cbStruct             = sizeof( WINTRUST_CATALOG_INFO );
        wci.pcwszCatalogFilePath = ci.wszCatalogFile;
        wci.pcwszMemberFilePath  = lpFileName;
         wci.pcwszMemberTag       = pszMemberTag;

          wd.cbStruct            = sizeof( WINTRUST_DATA );
          wd.dwUnionChoice       = WTD_CHOICE_CATALOG;
          wd.pCatalog            = &wci;
          wd.dwUIChoice          = WTD_UI_NONE;
          wd.fdwRevocationChecks = WTD_STATEACTION_VERIFY;
          wd.dwProvFlags         = 0;
          wd.hWVTStateData       = NULL;
          wd.pwszURLReference    = NULL;
   }
    GUID action = WINTRUST_ACTION_GENERIC_VERIFY_V2;
     HRESULT hr  = WinVerifyTrust( NULL, &action, &wd );
     bRet        = SUCCEEDED( hr );

     if ( NULL != hCatInfo )
     {
          CryptCATAdminReleaseCatalogContext( hCatAdmin, hCatInfo, 0 );
      }
      CryptCATAdminReleaseContext( hCatAdmin, 0 );

      if(pszMemberTag)
      {
            delete[] pszMemberTag;
             pszMemberTag = NULL;
       }
 
       return bRet;
  }

 void Test()
  {
          LPCWSTR wPath  = L"D:\\qq\\QQProtect\\Bin\\QQProtect.exe";
         if(CheckFileTrust(wPath))
             printf("已签名");
         else
              printf("未签名");

   }

   

原创粉丝点击