@echo off
setlocal

:: Lokasi certificate PFX dan password
set CERT_FILE=mycert.pfx
set CERT_PASS=yourpassword

:: Lokasi timestamp server (boleh tukar ikut provider)
set TIMESTAMP_URL=http://timestamp.digicert.com

:: Fail yang hendak di-sign (boleh automate ikut build output)
set TARGET_EXE=dist\myapp.exe

echo Signing %TARGET_EXE% ...

signtool sign ^
  /f "%CERT_FILE%" ^
  /p "%CERT_PASS%" ^
  /tr %TIMESTAMP_URL% ^
  /td sha256 ^
  /fd sha256 ^
  "%TARGET_EXE%"

if %ERRORLEVEL%==0 (
  echo Signing success!
) else (
  echo Signing failed!
)

endlocal
pause