sooo .... hab jetzt mal bisl spioniert wie sigcheck da vorgeht ...
Delphi-Quellcode:
Wintrust.CryptCATAdminAcquireContext
/hTemplateFile
|Attributes = NORMAL
|Mode = OPEN_EXISTING
|pSecurity = NULL
|ShareMode = FILE_SHARE_READ
|
Access = GENERIC_READ
|FileName
\CreateFileW
Wintrust.CryptCATAdminCalcHashFromFileHandle
Wintrust.CryptCATAdminEnumCatalogFromHash
Wintrust.CryptCATCatalogInfoFromContext
("C:\
WINNT\system32\CatRoot\
{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\sp4.cat" für Explorer.exe)
Wintrust.WinVerifyTrust
Wintrust.CryptCATAdminReleaseCatalogContext
Werde nun mal den Versuch starten das im Delphi nachzubauen ..