用C#创建.cat文件

本文关键字:文件 cat 创建 | 更新日期: 2023-09-27 18:21:08

我正在尝试导入并使用CryptCATCDFEnumMembersByCDFTagEx,以便使用C#创建.cat文件。函数返回null,参数似乎未初始化。我用C++编写了相应的代码,效果很好。我猜我的结构坏了。

如有任何帮助,我们将不胜感激。代码应该在程序的工作目录中创建一个Good.cat文件,该文件应该包含[CatalogFiles]下面指定的文件的哈希。

目录.cdf

[CatalogHeader]
Name=Good.cat
ResultDir=.'
PublicVersion=0x0000001
EncodingType=0x00010001
CATATTR1=0x10010001:OSAttr:2:6.0
[CatalogFiles]
Notepad.exe=C:'Windows'Notepad.exe

C#示例程序。

class Program
{
    //https://msdn.microsoft.com/en-us/library/windows/desktop/bb427419%28v=vs.85%29.aspx
    [StructLayout(LayoutKind.Sequential)]
    public struct CRYPTCATCDF
    {
        uint    cbStruct;
        IntPtr  hFile;
        uint    dwCurFilePos;
        uint    dwLastMemberOffset;
        bool    fEOF;
        [MarshalAs(UnmanagedType.LPWStr)]
        string  pwszResultDir;
        IntPtr  hCATStore;
    }
    //https://msdn.microsoft.com/en-us/library/windows/desktop/aa381414%28v=vs.85%29.aspx
    [StructLayout(LayoutKind.Sequential)]
    public struct CRYPTOAPI_BLOB
    {
        public uint cbData; // UInt32 cbData;
        //[MarshalAs(UnmanagedType.LPArray, SizeParamIndex = 0)]
        public IntPtr pbData; //public byte[] pbData
    } // CRYPT_INTEGER_BLOB, CRYPT_ATTR_BLOB, CRYPT_OBJID_BLOB, CRYPT_HASH_BLOB
    //https://msdn.microsoft.com/en-us/library/windows/desktop/bb736433%28v=vs.85%29.aspx
    [StructLayout(LayoutKind.Sequential)]
    public struct SIP_INDIRECT_DATA
    {
        public CRYPT_ATTRIBUTE_TYPE_VALUE Data;
        public CRYPT_ALGORITHM_IDENTIFIER DigestAlgorithm;
        public CRYPTOAPI_BLOB Digest;
    }
    //https://msdn.microsoft.com/en-us/library/windows/desktop/aa381151%28v=vs.85%29.aspx
    [StructLayout(LayoutKind.Sequential)]
    public struct CRYPT_ATTRIBUTE_TYPE_VALUE {
        [MarshalAs(UnmanagedType.LPStr)] 
        public string pszObjId;
        public CRYPTOAPI_BLOB Value;
    }
    //https://msdn.microsoft.com/en-us/library/windows/desktop/aa381133%28v=vs.85%29.aspx
    [StructLayout(LayoutKind.Sequential)]
    public struct CRYPT_ALGORITHM_IDENTIFIER
    {
        [MarshalAs(UnmanagedType.LPStr)]
        public string pszObjId;
        public CRYPTOAPI_BLOB Parameters;
    }
    //https://msdn.microsoft.com/en-us/library/windows/desktop/aa373931%28v=vs.85%29.aspx
    [StructLayout(LayoutKind.Sequential)]
    public struct GUID
    {
        int     a;
        short   b;
        short   c;
        [MarshalAs(UnmanagedType.ByValArray, SizeConst = 8)]
        byte[]  d;
    }
    //https://msdn.microsoft.com/en-us/library/windows/desktop/aa379905%28v=vs.85%29.aspx
    [StructLayout(LayoutKind.Sequential)]
    public class CRYPTCATMEMBER
    {
        public uint cbStruct;
        [MarshalAs(UnmanagedType.LPWStr)]
        public string pwszReferenceTag;
        [MarshalAs(UnmanagedType.LPWStr)]
        public string pwszFileName;
        public GUID gSubjectType;
        public uint fdwMemberFlags;
        public IntPtr pIndirectData;    //struct SIP_INDIRECT_DATA_  *pIndirectData;
        public uint dwCertVersion;
        public uint dwReserved;
        public IntPtr hReserved;
        public CRYPTOAPI_BLOB sEncodedIndirectData;
        public CRYPTOAPI_BLOB sEncodedMemberInfo;
    }
    //https://msdn.microsoft.com/en-us/library/windows/desktop/bb410248%28v=vs.85%29.aspx
    [UnmanagedFunctionPointer(CallingConvention.Cdecl)]
    public delegate void PFN_CDF_PARSE_ERROR_CALLBACK(
        [In] uint dwErrorArea,
        [In] uint dwLocalError,
        [In, MarshalAs(UnmanagedType.LPWStr)] string pwszLine
    );
    //https://msdn.microsoft.com/en-us/library/windows/desktop/bb427424%28v=vs.85%29.aspx
    [DllImport("wintrust.dll", ExactSpelling = true, SetLastError = true, CharSet = CharSet.Unicode)]
    static extern IntPtr CryptCATCDFOpen(
        [In, MarshalAs(UnmanagedType.LPWStr)] string pwszFilePath,
        [In, Optional] IntPtr pfnParseError
    );
    //https://msdn.microsoft.com/en-us/library/windows/desktop/bb427423%28v=vs.85%29.aspx
    [DllImport("wintrust.dll", ExactSpelling = true, SetLastError = true, CharSet = CharSet.Unicode)]
    static extern string CryptCATCDFEnumMembersByCDFTagEx(
        [In] IntPtr pCDF,
        [In, Out, MarshalAs(UnmanagedType.LPWStr)] StringBuilder pwszPrevCDFTag,
        [In] IntPtr pfnParseError,
        [In] CRYPTCATMEMBER ppMember,
        [In] bool fContinueOnError,
        [In] IntPtr pvReserved
    );
    private static void ParseErrorCallback(uint u1, uint u2, string s)
    {
        Console.WriteLine(u1 + " " + u2 + " " + s);
    }
    static void Main(string[] args)
    {
        PFN_CDF_PARSE_ERROR_CALLBACK pfn = new PFN_CDF_PARSE_ERROR_CALLBACK(ParseErrorCallback);
        StringBuilder sb = new StringBuilder(256);
        string s = string.Empty;
        IntPtr cdfPtr = CryptCATCDFOpen("catalog.cdf", Marshal.GetFunctionPointerForDelegate(pfn));
        CRYPTCATCDF cdf = (CRYPTCATCDF)Marshal.PtrToStructure(cdfPtr, typeof(CRYPTCATCDF));
        CRYPTCATMEMBER ccm = new CRYPTCATMEMBER();
        ccm.pIndirectData = Marshal.AllocHGlobal(Marshal.SizeOf(typeof(SIP_INDIRECT_DATA)));
        do
        {
            s = CryptCATCDFEnumMembersByCDFTagEx(cdfPtr, sb, Marshal.GetFunctionPointerForDelegate(pfn), ccm, true, IntPtr.Zero);
            Console.WriteLine(s ?? "N/A");
        } while (s != null);
    }
}

工作C++示例

void callback(DWORD u1, DWORD u2, LPWSTR s)
{
    printf("%d %d %s", u1, u2, s);
}
typedef LPWSTR(WINAPI *CryptCATCDFEnumMembersByCDFTagEx)(
    CRYPTCATCDF                  *pCDF,
    LPWSTR                       pwszPrevCDFTag,
    PFN_CDF_PARSE_ERROR_CALLBACK pfnParseError,
    CRYPTCATMEMBER               **ppMember,
    BOOL                         fContinueOnError,
    LPVOID                       pvReserved);
int _tmain(int argc, _TCHAR* argv[])
{
    CRYPTCATCDF     *cdf;
    CRYPTCATMEMBER  *pMember = NULL;
    LPWSTR          pwszMemberTag = NULL;
    HINSTANCE       dllHandle = LoadLibrary(L"wintrust.dll");
    cdf = CryptCATCDFOpen(L"catalog.cdf", (PFN_CDF_PARSE_ERROR_CALLBACK)callback);
    CryptCATCDFEnumMembersByCDFTagEx fptr = (CryptCATCDFEnumMembersByCDFTagEx)GetProcAddress(dllHandle, "CryptCATCDFEnumMembersByCDFTagEx");
    while (pwszMemberTag = (*fptr)(cdf, pwszMemberTag, NULL, &pMember, TRUE, NULL))
    {
        wprintf(L"%s", pwszMemberTag);
    }
    CryptCATCDFClose(cdf);
}

用C#创建.cat文件

只需对程序进行一些小的更改,我就可以创建目录文件。未修改任何结构或其成员。仍使用"CRYPTCATMEMBER"作为类

更改:

  1. 将null赋值给字符串变量,在本例中为"s"
  2. 枚举目录定义文件(.cdf)中的文件后调用CryptCATCDFClose函数

工作控制台程序。

static void Main(string[] args)
        {
            CRYPTCATMEMBER ccm = null;
            try
            {
                PFN_CDF_PARSE_ERROR_CALLBACK pfn = ParseErrorCallback;
                string s = null; //This null assignment is deliberately done.
                IntPtr cdfPtr = CryptCATCDFOpen("catalog.cdf", Marshal.GetFunctionPointerForDelegate(pfn));
                CRYPTCATCDF cdf = (CRYPTCATCDF) Marshal.PtrToStructure(cdfPtr, typeof(CRYPTCATCDF)); //This call is required else the catlog file creation fails
                ccm = new CRYPTCATMEMBER
                {
                    pIndirectData = Marshal.AllocHGlobal(Marshal.SizeOf(typeof(SIP_INDIRECT_DATA)))
                };
                do
                {
                    s = CryptCATCDFEnumMembersByCDFTagEx(cdfPtr, s, Marshal.GetFunctionPointerForDelegate(pfn), ccm, true, IntPtr.Zero);
                    Console.WriteLine(s ?? "N/A");
                } while (s != null);
                CryptCATCDFClose(cdfPtr); //This is required to update the .cat with the files details specified in .cdf file.
            }
            catch (Exception e)
            {
                Console.WriteLine(e);
                throw;
            }
            finally
            {
                // Free the unmanaged memory.
                if (ccm != null)
                {
                    Marshal.FreeHGlobal(ccm.pIndirectData);
                }
            }
        }