}

}

SetWindowText (GetDlgItem (hwndDlg, IDC_COMMANDHELP_TEXT), (char*) tmp);

TCfree(tmp);

DEFPUSHBUTTON "OK",IDOK,230,178,52,14

LTEXT "",IDC_HOMEPAGE,18,87,117,9,SS_NOTIFY

LTEXT "",IDT_ABOUT_RELEASE,18,71,235,8

LTEXT "",IDT_ABOUT_VERSION,18,61,161,8

CONTROL "",IDC_STATIC,"Static",SS_ETCHEDHORZ,1,167,291,1,WS_EX_STATICEDGE

CONTROL "",IDC_STATIC,"Static",SS_ETCHEDHORZ,1,169,291,1,WS_EX_STATICEDGE

CONTROL "",IDC_STATIC,"Static",SS_ETCHEDHORZ,1,107,291,1,WS_EX_STATICEDGE

CONTROL "",IDC_ABOUT_LOGO_AREA,"Static",SS_GRAYRECT | NOT WS_VISIBLE,0,0,293,50,WS_EX_TRANSPARENT | WS_EX_STATICEDGE

END

STYLE DS_SETFONT | DS_MODALFRAME | DS_3DLOOK | DS_FIXEDSYS | DS_CENTER | WS_POPUP | WS_CAPTION | WS_SYSMENU

CAPTION "Command Line Help"

CLASS "VeraCryptCustomDlg"

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

END

IDD_RAWDEVICES_DLG DIALOGEX 0, 0, 305, 209

END

IDD_MULTI_CHOICE_DLG DIALOGEX 0, 0, 167, 322

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

PUSHBUTTON "",IDC_CHOICE10,7,292,153,24,BS_CENTER | BS_MULTILINE,WS_EX_STATICEDGE

#ifdef APSTUDIO_INVOKED

GUIDELINES DESIGNINFO

BEGIN

IDD_COMMANDHELP_DLG, DIALOG

BEGIN

END

IDD_RAWDEVICES_DLG, DIALOG

#ifdef TCMOUNT

#include "Mount/Mount.h"

#endif

#ifdef VOLFORMAT

}

}

// Protects an input field from having its content updated by a Paste action (call ToBootPwdField() to use this).

static LRESULT CALLBACK BootPwdFieldProc (HWND hwnd, UINT message, WPARAM wParam, LPARAM lParam)

}

wstring GetSysEncryptionPretestInfo2String (void)

{

// This huge string is divided into smaller portions to make it easier for translators to

StringCbCatW (szTmp, sizeof(szTmp), GetString ("PASSWORD_WRONG_CAPSLOCK_ON"));

#ifdef TCMOUNT

{

StringCbPrintfW (szTmp, sizeof(szTmp), GetString (KeyFilesEnable ? "PASSWORD_OR_KEYFILE_OR_MODE_WRONG" : "PASSWORD_OR_MODE_WRONG"));

wrec.bottom - wrec.top - vertSubOffset + 1 + vertMsgHeightOffset,

TRUE);

return 1;

}

break;

case WM_CLOSE:

return 1;

}

return MessageBoxW (hwnd, GetString (stringId), lpszTitle, MB_ICONQUESTION | MB_YESNO | MB_DEFBUTTON2);

}

int AskOkCancel (char *stringId, HWND hwnd)

{

// Input format 2: {L"", L"Message text", L"Button caption 1", ... L"Last button caption", 0};

// The second format is to be used if any of the strings contains format specification (e.g. %s, %d) or

// in any other cases where a string needs to be resolved before calling this function.

int AskMultiChoice (void *strings[], BOOL bBold, HWND hwnd)

{

MULTI_CHOICE_DLGPROC_PARAMS params;

#ifndef SETUP

{

if (AskWarnYesNo ("NONSYS_INPLACE_ENC_RESUME_PROMPT", hwndDlg) == IDYES)

char *multiChoiceStr[] = { 0, "ASK_NONSYS_INPLACE_ENC_NOTIFICATION_REMOVAL", "DO_NOT_PROMPT_ME", "KEEP_PROMPTING_ME", 0 };

extern BOOL bSysPartitionSelected;

extern BOOL bSysDriveSelected;

extern BOOL bHyperLinkBeingTracked;

extern BOOL bInPlaceEncNonSysPending;

int GetAvailableFixedDisks ( HWND hComboBox , char *lpszRootPath );

int GetAvailableRemovables ( HWND hComboBox , char *lpszRootPath );

int IsSystemDevicePath (const char *path, HWND hwndDlg, BOOL bReliableRequired);

BOOL CALLBACK RawDevicesDlgProc ( HWND hwndDlg , UINT msg , WPARAM wParam , LPARAM lParam );

BOOL TextInfoDialogBox (int nID);

BOOL CALLBACK TextInfoDialogBoxDlgProc (HWND hwndDlg, UINT msg, WPARAM wParam, LPARAM lParam);

int AskYesNoString (const wchar_t *str, HWND hwnd);

int AskYesNoTopmost (char *stringId, HWND hwnd);

int AskNoYes (char *stringId, HWND hwnd);

int AskOkCancel (char *stringId, HWND hwnd);

int AskWarnYesNo (char *stringId, HWND hwnd);

int AskWarnYesNoString (const wchar_t *string, HWND hwnd);

int GetTextGfxHeight (HWND hwndDlgItem, const wchar_t *text, HFONT hFont);

BOOL ToHyperlink (HWND hwndDlg, UINT ctrlId);

BOOL ToCustHyperlink (HWND hwndDlg, UINT ctrlId, HFONT hFont);

void ToBootPwdField (HWND hwndDlg, UINT ctrlId);

void AccommodateTextField (HWND hwndDlg, UINT ctrlId, BOOL bFirstUpdate, HFONT hFont);

BOOL GetDriveLabel (int driveNo, wchar_t *label, int labelSize);

BOOL DoDriverInstall (HWND hwndDlg);

int OpenVolume (OpenVolumeContext *context, const char *volumePath, Password *password, int pkcs5_prf, BOOL truecryptMode, BOOL write, BOOL preserveTimestamps, BOOL useBackupHeader);

void CloseVolume (OpenVolumeContext *context);

BOOL IsFileOnReadOnlyFilesystem (const char *path);

void CheckFilesystem (HWND hwndDlg, int driveNo, BOOL fixErrors);

BOOL BufferContainsString (const byte *buffer, size_t bufferSize, const char *str);

BOOL RemoveDeviceWriteProtection (HWND hwndDlg, char *devicePath);

void EnableElevatedCursorChange (HWND parent);

BOOL DisableFileCompression (HANDLE file);

<control lang="en" key="IDT_COLLECTING_RANDOM_DATA_NOTE">IMPORTANT: Move your mouse as randomly as possible within this window. The longer you move it, the better. This significantly increases the cryptographic strength of the encryption keys. Then click Next to continue.</control>

<control lang="en" key="IDT_CONFIRM">&amp;Confirm:</control>

<control lang="en" key="IDT_DONE">Done</control>

<control lang="en" key="IDT_ENCRYPTION_ALGO">Encryption Algorithm</control>

<control lang="en" key="IDT_FILESYSTEM">Filesystem </control>

<control lang="en" key="IDT_FILE_CONTAINER">Creates a virtual encrypted disk within a file. Recommended for inexperienced users.</control>

<control lang="en" key="IDM_CREATE_HIDDEN_OS">Create Hidden Operating System...</control>

<control lang="en" key="IDM_CREATE_RESCUE_DISK">Create Rescue Disk...</control>

<control lang="en" key="IDM_CREATE_VOLUME">Create New Volume...</control>

<control lang="en" key="IDM_DEFAULT_KEYFILES">Default Keyfiles...</control>

<control lang="en" key="IDM_DEFAULT_MOUNT_PARAMETERS">Default Mount Parameters...</control>

<control lang="en" key="IDM_DONATE">Donate now...</control>

<string lang="en" key="ACCESS_DENIED">Error: Access denied.\n\nThe partition you are trying to access is either 0 sectors long, or it is the boot device.</string>

<string lang="en" key="ADMINISTRATOR">Administrator</string>

<string lang="en" key="ADMIN_PRIVILEGES_DRIVER">In order to load the VeraCrypt driver, you need to be logged into an account with administrator privileges.</string>

<string lang="en" key="ADMIN_PRIVILEGES_WARN_HIDVOL">In order to create a hidden volume you need to be logged into an account with administrator privileges.\n\nContinue?</string>

<string lang="en" key="ADMIN_PRIVILEGES_WARN_NTFS">Please note that in order to format the volume as NTFS you need to be logged into an account with administrator privileges.\n\nWithout administrator privileges, you can format the volume as FAT.</string>

<string lang="en" key="AES_HELP">FIPS-approved cipher (Rijndael, published in 1998) that may be used by U.S. government departments and agencies to protect classified information up to the Top Secret level. 256-bit key, 128-bit block, 14 rounds (AES-256). Mode of operation is XTS.</string>

<string lang="en" key="FORMAT_FINISHED_HELP">\n\nThe VeraCrypt volume has been created and is ready for use. If you wish to create another VeraCrypt volume, click Next. Otherwise, click Exit.</string>

<string lang="en" key="SYSENC_HIDDEN_VOL_FORMAT_FINISHED_HELP">\n\nThe hidden VeraCrypt volume has been successfully created (the hidden operating system will reside within this hidden volume).\n\nClick Next to continue.</string>

<string lang="en" key="NONSYS_INPLACE_ENC_FINISHED_TITLE">Volume Fully Encrypted</string>

<string lang="en" key="NONSYS_INPLACE_ENC_FINISHED_INFO">IMPORTANT: TO MOUNT THIS NEWLY CREATED VERACRYPT VOLUME AND TO ACCESS DATA STORED IN IT, CLICK 'Auto-Mount Devices' IN THE MAIN VERACRYPT WINDOW. After you enter the correct password (and/or supply correct keyfiles), the volume will be mounted to the drive letter you select from the list in the main VeraCrypt window (and you will be able to access the encrypted data via the selected drive letter).\n\nPLEASE REMEMBER OR WRITE DOWN THE ABOVE STEPS. YOU MUST FOLLOW THEM WHENEVER YOU WANT TO MOUNT THE VOLUME AND ACCESS DATA STORED IN IT. Alternatively, in the main VeraCrypt window, click 'Select Device', then select this partition/volume, and click 'Mount'.\n\nThe partition/volume has been successfully encrypted (it contains a fully encrypted VeraCrypt volume now) and is ready for use.</string>

<string lang="en" key="FORMAT_FINISHED_INFO">The VeraCrypt volume has been successfully created.</string>

<string lang="en" key="FORMAT_FINISHED_TITLE">Volume Created</string>

<string lang="en" key="FORMAT_HELP">IMPORTANT: Move your mouse as randomly as possible within this window. The longer you move it, the better. This significantly increases the cryptographic strength of the encryption keys. Then click Format to create the volume.</string>

<string lang="en" key="NODRIVER">Unable to connect to the VeraCrypt device driver. VeraCrypt cannot work if the device driver is not running.\n\nPlease note that, due to a Windows issue, it may be necessary to log off or restart the system before the device driver can be loaded.</string>

<string lang="en" key="NOFONT">Error occurred when loading/preparing fonts.</string>

<string lang="en" key="NOT_FOUND">The drive letter was not found or no drive letter was specified.</string>

<string lang="en" key="DRIVE_LETTER_UNAVAILABLE">Drive letter not available.</string>

<string lang="en" key="NO_FILE_SELECTED">No file selected!</string>

<string lang="en" key="NO_FREE_DRIVES">No drive letters available.</string>

<string lang="en" key="OVERWRITEPROMPT">WARNING: The file '%hs' already exists!\n\nIMPORTANT: VERACRYPT WILL NOT ENCRYPT THE FILE, BUT IT WILL DELETE IT. Are you sure you want to delete the file and replace it with a new VeraCrypt container?</string>

<string lang="en" key="OVERWRITEPROMPT_DEVICE">CAUTION: ALL FILES CURRENTLY STORED ON THE SELECTED %s '%hs'%s WILL BE ERASED AND LOST (THEY WILL NOT BE ENCRYPTED)!\n\nAre you sure you want to proceed with format?</string>

<string lang="en" key="NONSYS_INPLACE_ENC_CONFIRM">WARNING: You will not be able to mount the volume or access any files stored on it until it has been fully encrypted.\n\nAre you sure you want to start encrypting the selected %s '%hs'%s?</string>

<string lang="en" key="OVERWRITEPROMPT_DEVICE_HIDDEN_OS_PARTITION">CAUTION: ANY FILES CURRENTLY STORED ON THE PARTITION '%hs'%s (I.E. ON THE FIRST PARTITION BEHIND THE SYSTEM PARTITION) WILL BE ERASED AND LOST (THEY WILL NOT BE ENCRYPTED)!\n\nAre you sure you want to proceed with format?</string>

<string lang="en" key="OVERWRITEPROMPT_DEVICE_SECOND_WARNING_LOTS_OF_DATA">WARNING: THE SELECTED PARTITION CONTAINS A LARGE AMOUNT OF DATA! Any files stored on the partition will be erased and lost (they will NOT be encrypted)!</string>

<string lang="en" key="ERASE_FILES_BY_CREATING_VOLUME">Erase any files stored on the partition by creating a VeraCrypt volume within it</string>

<string lang="en" key="KEYFILE_CHANGED">Keyfile(s) successfully added/removed.</string>

<string lang="en" key="KEYFILE_EXPORTED">Keyfile exported.</string>

<string lang="en" key="PKCS5_PRF_CHANGED">Header key derivation algorithm successfully set.</string>

<string lang="en" key="PASSWORD_HELP">It is very important that you choose a good password. You should avoid choosing one that contains only a single word that can be found in a dictionary (or a combination of 2, 3, or 4 such words). It should not contain any names or dates of birth. It should not be easy to guess. A good password is a random combination of upper and lower case letters, numbers, and special characters, such as @ ^ = $ * + etc. We recommend choosing a password consisting of more than 20 characters (the longer, the better). The maximum possible length is 64 characters.</string>

<string lang="en" key="PASSWORD_HIDDENVOL_HELP">Please choose a password for the hidden volume. </string>

<string lang="en" key="PASSWORD_HIDDEN_OS_HELP">Please choose a password for the hidden operating system (i.e. for the hidden volume). </string>

<string lang="en" key="PASSWORD_WRONG_CAPSLOCK_ON">\n\nWarning: Caps Lock is on. This may cause you to enter your password incorrectly.</string>

<string lang="en" key="HIDDEN_FILES_PRESENT_IN_KEYFILE_PATH">\n\nWARNING: Hidden file(s) have been found in a keyfile search path. Such hidden files cannot be used as keyfiles. If you need to use them as keyfiles, remove their 'Hidden' attribute (right-click each of them, select 'Properties', uncheck 'Hidden' and click OK). Note: Hidden files are visible only if the corresponding option is enabled (Computer > Organize > 'Folder and search options' > View).</string>

<string lang="en" key="HIDDEN_VOL_PROT_PASSWORD_US_KEYB_LAYOUT">If you are attempting to protect a hidden volume containing a hidden system, please make sure you are using the standard US keyboard layout when typing the password for the hidden volume. This is required due to the fact that the password needs to be typed in the pre-boot environment (before Windows starts) where non-US Windows keyboard layouts are not available.</string>

<string lang="en" key="SELECTED_PARTITION_ALREADY_INPLACE_ENC">The selected partition/device is already fully encrypted.\nHeader Flags = 0x%.8X</string>

<string lang="en" key="SELECTED_PARTITION_NOT_INPLACE_ENC">The selected partition/device is not using in-place encryption.\nHeader Flags = 0x%.8X</string>

<string lang="en" key="SYSENC_MOUNT_WITHOUT_PBA_NOTE">\n\nNote: If you are attempting to mount a partition located on an encrypted system drive without pre-boot authentication or to mount the encrypted system partition of an operating system that is not running, you can do so by selecting 'System' > 'Mount Without Pre-Boot Authentication'.</string>

<string lang="en" key="MOUNT_WITHOUT_PBA_VOL_ON_ACTIVE_SYSENC_DRIVE">In this mode, you cannot mount a partition located on a drive whose portion is within the key scope of active system encryption.\n\nBefore you can mount this partition in this mode, you need to either boot an operating system installed on a different drive (encrypted or unencrypted) or boot an unencrypted operating system.</string>

<string lang="en" key="PREV">&lt; &amp;Back</string>

<string lang="en" key="RAWDEVICES">Unable to list raw devices installed on your system!</string>

<string lang="en" key="READONLYPROMPT">The volume '%hs' exists, and is read-only. Are you sure you want to replace it?</string>

<string lang="en" key="WRONG_VOL_TYPE">VeraCrypt cannot change the password for a foreign volume.</string>

<string lang="en" key="SELECT_FREE_DRIVE">Please select a free drive letter from the list.</string>

<string lang="en" key="SELECT_A_MOUNTED_VOLUME">Please select a mounted volume in the drive letter list.</string>

<string lang="en" key="CANT_CREATE_AUTORUN">Error: Cannot create autorun.inf</string>

<string lang="en" key="ERR_PROCESS_KEYFILE">Error while processing keyfile!</string>

<string lang="en" key="ERR_PROCESS_KEYFILE_PATH">Error processing keyfile path!</string>

<string lang="en" key="FOR_MORE_INFO_ON_PARTITIONS">For information on how to create and manage partitions, please refer to the documentation supplied with your operating system or contact your computer vendor's technical support team for assistance.</string>

<string lang="en" key="SYSTEM_PARTITION_NOT_ACTIVE">Error: The currently running operating system is not installed on the boot partition (first Active partition). This is not supported.</string>

<string lang="en" key="CONFIRM_FAT_FOR_FILES_OVER_4GB">You indicated that you intend to store files larger than 4 GB in this VeraCrypt volume. However, you chose the FAT file system, on which files larger than 4 GB cannot be stored.\n\nAre you sure you want to format the volume as FAT?</string>

<string lang="en" key="CANT_ACCESS_VOL">Error: Cannot access the volume!\n\nMake sure that the selected volume exists, that it is not mounted or being used by the system or an application, that you have read/write permission for the volume, and that it is not write-protected.</string>

<string lang="en" key="INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL">Error: Cannot access the volume and/or obtain information about the volume.\n\nMake sure that the selected volume exists, that it is not being used by the system or applications, that you have read/write permission for the volume, and that it is not write-protected.</string>

<string lang="en" key="INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL_ALT">Error: Cannot access the volume and/or obtain information about the volume. Make sure that the selected volume exists, that it is not being used by the system or applications, that you have read/write permission for the volume, and that it is not write-protected.\n\nIf the problem persists, it might help to follow the below steps.</string>

<string lang="en" key="INPLACE_ENC_GENERIC_ERR_ALT_STEPS">An error prevented VeraCrypt from encrypting the partition. Please try fixing any previously reported problems and then try again. If the problems persist, it might help to follow the below steps.</string>

<string lang="en" key="CANT_DISMOUNT_OUTER_VOL">Error: Cannot dismount the outer volume!\n\nVolume cannot be dismounted if it contains files or folders being used by a program or the system.\n\nPlease close any program that might be using files or directories on the volume and click Retry.</string>

<string lang="en" key="CANT_GET_OUTER_VOL_INFO">Error: Cannot obtain information about the outer volume!\nVolume creation cannot continue.</string>

<string lang="en" key="CANT_ACCESS_OUTER_VOL">Error: Cannot access the outer volume! Volume creation cannot continue.</string>

<string lang="en" key="CONFIRM_NO_FORCED_AUTODISMOUNT">WARNING: If this option is disabled, volumes containing open files/directories will not be possible to auto-dismount.\n\nAre you sure you want to disable this option?</string>

<string lang="en" key="WARN_PREF_AUTO_DISMOUNT">WARNING: Volumes containing open files/directories will NOT be auto-dismounted.\n\nTo prevent this, enable the following option in this dialog window: 'Force auto-dismount even if volume contains open files or directories'</string>

<string lang="en" key="WARN_PREF_AUTO_DISMOUNT_ON_POWER">WARNING: When the notebook battery power is low, Windows may omit sending the appropriate messages to running applications when the computer is entering power saving mode. Therefore, VeraCrypt may fail to auto-dismount volumes in such cases.</string>

<string lang="en" key="SYSTEM_ENCRYPTION_RESUME_PROMPT">You have scheduled the process of encryption or decryption of the system partition/drive. The process has not been completed yet.\n\nDo you want to start (resume) the process now?</string>

<string lang="en" key="KEEP_PROMPTING_ME">Yes, keep prompting me</string>

<string lang="en" key="DO_NOT_PROMPT_ME">No, do not prompt me</string>

<string lang="en" key="SYSTEM_ENCRYPTION_SCHEDULED_BUT_PBA_FAILED">You have scheduled the process of encryption or decryption of the system partition/drive. However, pre-boot authentication failed (or was bypassed).\n\nNote: If you decrypted the system partition/drive in the pre-boot environment, you may need to finalize the process by selecting 'System' &gt; 'Permanently Decrypt System Partition/Drive' from the menu bar of the main VeraCrypt window.</string>

<string lang="en" key="CONFIRM_EXIT">WARNING: If VeraCrypt exits now, the following functions will be disabled:\n\n1) Hot keys\n2) Auto-dismount (e.g., upon logoff, inadvertent host device removal, time-out, etc.)\n3) Auto-mount of favorite volumes\n4) Notifications (e.g., when damage to hidden volume is prevented)\n\nNote: If you do not wish VeraCrypt to run in the background, disable the VeraCrypt Background Task in the Preferences (and, if necessary, disable the automatic start of VeraCrypt in the Preferences).\n\nAre you sure you want VeraCrypt to exit?</string>

<string lang="en" key="CONFIRM_EXIT_UNIVERSAL">Exit?</string>

<string lang="en" key="CHOOSE_ENCRYPT_OR_DECRYPT">VeraCrypt does not have sufficient information to determine whether to encrypt or decrypt.</string>

<string lang="en" key="CHOOSE_ENCRYPT_OR_DECRYPT_FINALIZE_DECRYPT_NOTE">VeraCrypt does not have sufficient information to determine whether to encrypt or decrypt.\n\nNote: If you decrypted the system partition/drive in the pre-boot environment, you may need to finalize the process by clicking Decrypt.</string>

<string lang="en" key="SYSTEM_ENCRYPTION_DEFER_CONFIRM">Do you want to interrupt and postpone the process of encryption of the system partition/drive?\n\nNote: You will be able to resume the process and it will continue from the point it was stopped. You can do so, for example, by selecting 'System' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window. If you want to permanently terminate or reverse the encryption process, select 'System' &gt; 'Permanently Decrypt System Partition/Drive'.</string>

<string lang="en" key="SYSTEM_DECRYPTION_DEFER_CONFIRM">Do you want to interrupt and postpone the process of decryption of the system partition/drive?\n\nNote: You will be able to resume the process and it will continue from the point it was stopped. You can do so, for example, by selecting 'System' &gt; 'Resume Interrupted Process' from the menu bar of the main VeraCrypt window. If you want to reverse the decryption process (and start encrypting), select 'System' &gt; 'Encrypt System Partition/Drive'.</string>

<string lang="en" key="FAILED_TO_INTERRUPT_SYSTEM_ENCRYPTION">Error: Failed to interrupt the process of encryption/decryption of the system partition/drive.</string>

<string lang="en" key="FAILED_TO_START_WIPING">Error: Failed to start the process of wiping.</string>

<string lang="en" key="INCONSISTENCY_RESOLVED">Inconsistency resolved.\n\n\n(If you report a bug in connection with this, please include the following technical information in the bug report:\n%hs)</string>

<string lang="en" key="UNEXPECTED_STATE">Error: Unexpected state.\n\n\n(If you report a bug in connection with this, please include the following technical information in the bug report:\n%hs)</string>

<string lang="en" key="HIDVOL_PROT_BKG_TASK_WARNING">WARNING: VeraCrypt Background Task is disabled. After you exit VeraCrypt, you will not be notified if damage to hidden volume is prevented.\n\nNote: You may shut down the Background Task anytime by right-clicking the VeraCrypt tray icon and selecting 'Exit'.\n\nEnable VeraCrypt Background Task?</string>

<string lang="en" key="LANG_PACK_VERSION">Language pack version: %s</string>

<string lang="en" key="CHECKING_FS">Checking the file system on the VeraCrypt volume mounted as %hs...</string>

<string lang="en" key="SYS_ENCRYPTION_PRETEST_RESULT_INFO">The pretest has been successfully completed.\n\nWARNING: Please note that if power supply is suddenly interrupted while encrypting existing data in place, or when the operating system crashes due to a software error or hardware malfunction while VeraCrypt is encrypting existing data in place, portions of the data will be corrupted or lost. Therefore, before you start encrypting, please make sure that you have backup copies of the files you want to encrypt. If you do not, please back up the files now (you can click Defer, back up the files, then run VeraCrypt again anytime, and select 'System' &gt; 'Resume Interrupted Process' to start encrypting).\n\nWhen ready, click Encrypt to start encrypting.</string>

<string lang="en" key="SYSENC_ENCRYPTION_PAGE_INFO">You can click Pause or Defer anytime to interrupt the process of encryption or decryption, exit this wizard, restart or shut down your computer, and then resume the process, which will continue from the point it was stopped. To prevent slowdown when the system or applications write or read data from the system drive, VeraCrypt automatically waits until the data is written or read (see Status above) and then automatically continues encrypting or decrypting.</string>

<string lang="en" key="NONSYS_INPLACE_ENC_ENCRYPTION_PAGE_INFO">\n\nYou can click Pause or Defer anytime to interrupt the process of encryption, exit this wizard, restart or shut down your computer, and then resume the process, which will continue from the point it was stopped. Note that the volume cannot be mounted until it has been fully encrypted.</string>

<string lang="en" key="SYSENC_HIDDEN_OS_INITIAL_INFO_TITLE">Hidden System Started</string>

<string lang="en" key="SYSENC_HIDDEN_OS_WIPE_INFO_TITLE">Original System</string>

<string lang="en" key="SYSENC_HIDDEN_OS_WIPE_INFO">Windows creates (typically, without your knowledge or consent) various log files, temporary files, etc., on the system partition. It also saves the content of RAM to hibernation and paging files located on the system partition. Therefore, if an adversary analyzed files stored on the partition where the original system (of which the hidden system is a clone) resides, he might find out, for example, that you used the VeraCrypt wizard in the hidden-system-creation mode (which might indicate the existence of a hidden operating system on your computer).\n\nTo prevent such issues, VeraCrypt will, in the next steps, securely erase the entire content of the partition where the original system resides. Afterwards, in order to achieve plausible deniability, you will need to install a new system on the partition and encrypt it. Thus you will create the decoy system and the whole process of creation of the hidden operating system will be completed.</string>

<string lang="en" key="SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE">An instance of the VeraCrypt Volume Creation Wizard is currently running on this system and performing or preparing encryption/decryption of the system partition/drive. Before you proceed, please wait for it to finish or close it. If you cannot close it, please restart your computer before proceeding.</string>

<string lang="en" key="SYSTEM_ENCRYPTION_NOT_COMPLETED">The process of encryption or decryption of the system partition/drive has not been completed. Please wait until it is complete before proceeding.</string>

<string lang="en" key="ERR_ENCRYPTION_NOT_COMPLETED">Error: The process of encryption of the partition/drive has not been completed. It must be completed first.</string>

<string lang="en" key="ERR_SYS_HIDVOL_HEAD_REENC_MODE_WRONG">The password is correct, VeraCrypt has successfully decrypted the volume header and detected that this volume is a hidden system volume. However, you cannot modify the header of a hidden system volume this way.\n\nTo change the password for a hidden system volume, boot the operating system residing in the hidden volume, and then select 'System' &gt; 'Change Password' from the menu bar of the main VeraCrypt window.\n\nTo set the header key derivation algorithm, boot the hidden operating system and then select 'System' &gt; 'Set Header Key Derivation Algorithm'.</string>

<string lang="en" key="CANNOT_DECRYPT_HIDDEN_OS">VeraCrypt does not support in-place decryption of a hidden system partition.\n\nNote: If you want to decrypt the decoy system partition, boot the decoy system, and then select 'System' &gt; 'Permanently Decrypt System Partition/Drive' from the menu bar of the main VeraCrypt window.</string>

<string lang="en" key="ERR_PARAMETER_INCORRECT">Error: Incorrect/invalid parameter.</string>

<string lang="en" key="CONFIRM_SYSTEM_ENCRYPTION_MODE">You have selected the system partition/drive (or the boot partition), but the wizard mode you selected is suitable only for non-system partitions/drives.\n\nDo you want to set up pre-boot authentication (which means that you will need to enter your password each time before Windows boots/starts) and encrypt the system partition/drive?</string>

<string lang="en" key="CONFIRM_DECRYPT_SYS_DEVICE">Are you sure you want to permanently decrypt the system partition/drive?</string>

<string lang="en" key="CONFIRM_DECRYPT_SYS_DEVICE_CAUTION">CAUTION: If you permanently decrypt the system partition/drive, unencrypted data will be written to it.\n\nAre you really sure you want to permanently decrypt the system partition/drive?</string>

<string lang="en" key="CONFIRM_CASCADE_FOR_SYS_ENCRYPTION">Warning: If you use a cascade of ciphers for system encryption, you may encounter the following issues:\n\n1) The VeraCrypt Boot Loader is larger than normal and, therefore, there is not enough space in the first drive track for a backup of the VeraCrypt Boot Loader. Hence, whenever it gets damaged (which often happens, for example, during inappropriately designed anti-piracy activation procedures of certain programs), you will need to use the VeraCrypt Rescue Disk to boot or to repair the VeraCrypt Boot Loader.\n\n2) On some computers, resuming from hibernation takes longer.\n\nThese potential issues can be prevented by choosing a non-cascade encryption algorithm (e.g. AES).\n\nAre you sure you want to use a cascade of ciphers?</string>

<string lang="en" key="NOTE_CASCADE_FOR_SYS_ENCRYPTION">If you encounter any of the previously described problems, decrypt the partition/drive (if it is encrypted) and then try encrypting it again using a non-cascade encryption algorithm (e.g. AES).</string>

<string lang="en" key="UPDATE_TC_IN_DECOY_OS_FIRST">WARNING: For safety and security reasons, you should update VeraCrypt on the decoy operating system before you update it on the hidden operating system.\n\nTo do so, boot the decoy system and run the VeraCrypt installer from within it. Then boot the hidden system and run the installer from within it as well.\n\nNote: The decoy system and the hidden system share a single boot loader. If you upgraded VeraCrypt only on the hidden system (but not on the decoy system), the decoy system would contain a VeraCrypt driver and VeraCrypt applications whose version numbers are different from the version number of the VeraCrypt Boot Loader. Such a discrepancy might indicate that there is a hidden operating system on this computer.\n\n\nDo you want to continue?</string>

<string lang="en" key="ENABLE_BAD_SECTOR_ZEROING">Error: Content of one or more sectors on the disk cannot be read (probably due to a physical defect).\n\nThe process of in-place encryption can continue only when the sectors have been made readable again. VeraCrypt can attempt to make these sectors readable by writing zeros to the sectors (subsequently such all-zero blocks would be encrypted). However, note that any data stored in the unreadable sectors will be lost. If you want to avoid that, you can attempt to recover portions of the corrupted data using appropriate third-party tools.\n\nNote: In case of physically damaged sectors (as opposed to mere data corruption and checksum errors) most types of storage devices internally reallocate the sectors when data is attempted to be written to them (so the existing data in the damaged sectors may remain unencrypted on the drive).\n\nDo you want VeraCrypt to write zeroes to unreadable sectors?</string>

<string lang="en" key="DISCARD_UNREADABLE_ENCRYPTED_SECTORS">Error: Content of one or more sectors on the disk cannot be read (probably due to a physical defect).\n\nTo be able to proceed with decryption, VeraCrypt will have to discard the content of the unreadable sectors (the content will be replaced with pseudorandom data). Please note that, before proceeding, you can attempt to recover portions of any corrupted data using appropriate third-party tools.\n\nDo you want VeraCrypt to discard data in the unreadable sectors now?</string>

<string lang="en" key="ZEROED_BAD_SECTOR_COUNT">Note: VeraCrypt has replaced the content of %I64d unreadable sectors (%s) with encrypted all-zero plaintext blocks.</string>

<string lang="en" key="ENTER_TOKEN_PASSWORD">Enter password/PIN for token '%s':</string>

<string lang="en" key="PKCS11_LIB_LOCATION_HELP">In order to allow VeraCrypt to access a security token or smart card, you need to install a PKCS #11 software library for the token or smart card first. Such a library may be supplied with the device or it may be available for download from the website of the vendor or other third parties.\n\nAfter you install the library, you can either select it manually by clicking 'Select Library' or you can let VeraCrypt find and select it automatically by clicking 'Auto-Detect Library' (only the Windows system directory will be searched).</string>

<string lang="en" key="SELECT_PKCS11_MODULE_HELP">Note: For the filename and location of the PKCS #11 library installed for your security token or smart card, please refer to the documentation supplied with the token, card, or third-party software.\n\nClick 'OK' to select the path and filename.</string>

<string lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN_TITLE">Warning: VeraCrypt volume auto-dismounted</string>

<string lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN">Before you physically remove or turn off a device containing a mounted volume, you should always dismount the volume in VeraCrypt first.\n\nUnexpected spontaneous dismount is usually caused by an intermittently failing cable, drive (enclosure), etc.</string>

<string lang="en" key="UNSUPPORTED_TRUECRYPT_FORMAT">This volume was created with TrueCrypt %x.%x but VeraCrypt supports only TrueCrypt volumes created with TrueCrypt 6.x/7.x series</string>

<string lang="en" key="KEYFILE">Keyfile</string>

<string lang="en" key="VKEY_08">Backspace</string>

<string lang="en" key="VKEY_09">Tab</string>

// Volume header flags

#define TC_HEADER_FLAG_ENCRYPTED_SYSTEM 0x1

#ifndef TC_HEADER_Volume_VolumeHeader

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

EDITTEXT IDC_PASSWORD_DIRECT,50,2,149,14,ES_PASSWORD | ES_AUTOHSCROLL

CONTROL "&Display password",IDC_SHOW_PASSWORD_SINGLE,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,50,31,84,11,WS_EX_TRANSPARENT

CONTROL "U&se keyfiles",IDC_KEYFILES_ENABLE,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,50,42,82,11

PUSHBUTTON "&Keyfiles...",IDC_KEY_FILES,142,39,64,14

LTEXT "",IDC_BOX_HELP,0,57,225,94

RTEXT "Password:",IDT_PASSWORD,0,6,48,8

RTEXT "PKCS-5 PRF:",IDT_PKCS5_PRF,0,17,48,8

END

LISTBOX IDC_LIST_BOX,0,3,222,100,LBS_NOINTEGRALHEIGHT | LBS_DISABLENOSCROLL | WS_VSCROLL

END

#ifdef APSTUDIO_INVOKED

/////////////////////////////////////////////////////////////////////////////

TOPMARGIN, 7

BOTTOMMARGIN, 145

END

END

#endif // APSTUDIO_INVOKED

using namespace std;

using namespace VeraCrypt;

#define TC_MAX_NONSYS_INPLACE_ENC_WORK_CHUNK_SIZE (2048 * BYTES_PER_KB)

#define TC_INITIAL_NTFS_CONCEAL_PORTION_SIZE (2 * TC_MAX_VOLUME_SECTOR_SIZE)

#define TC_NTFS_CONCEAL_CONSTANT 0xFF

return TRUE;

}

int EncryptPartitionInPlaceBegin (volatile FORMAT_VOL_PARAMETERS *volParams, volatile HANDLE *outHandle, WipeAlgorithmId wipeAlgorithm)

{

// In the config file, increase the number of partitions where in-place encryption is in progress

// Add the wizard to the system startup sequence if appropriate

// Update the configuration files

return nStatus;

}

int FastVolumeHeaderUpdate (HANDLE dev, CRYPTO_INFO *headerCryptoInfo, CRYPTO_INFO *masterCryptoInfo, __int64 deviceSize)

{

mputInt64 (fieldPos, (masterCryptoInfo->EncryptedAreaStart.Value));

mputInt64 (fieldPos, (masterCryptoInfo->EncryptedAreaLength.Value));

headerCrc32 = GetCrc32 (header + TC_HEADER_OFFSET_MAGIC, TC_HEADER_OFFSET_HEADER_CRC - TC_HEADER_OFFSET_MAGIC);

fieldPos = (byte *) header + TC_HEADER_OFFSET_HEADER_CRC;

}

{

int count;

char str[32];

RemoveNonSysInPlaceEncNotifications();

return TRUE;

}

{

if (newWipeAlgorithm != TC_WIPE_NONE)

{

{

remove (GetConfigPath (TC_APPD_FILENAME_NONSYS_INPLACE_ENC_WIPE));

}

}

}

NONSYS_INPLACE_ENC_STATUS_PREPARING,

NONSYS_INPLACE_ENC_STATUS_RESIZING,

NONSYS_INPLACE_ENC_STATUS_ENCRYPTING,

NONSYS_INPLACE_ENC_STATUS_FINALIZING,

NONSYS_INPLACE_ENC_STATUS_PAUSED,

NONSYS_INPLACE_ENC_STATUS_FINISHED,

};

BOOL CheckRequirementsForNonSysInPlaceEnc (HWND hwndDlg, const char *devicePath, BOOL silent);

int EncryptPartitionInPlaceBegin (volatile FORMAT_VOL_PARAMETERS *volParams, volatile HANDLE *outHandle, WipeAlgorithmId wipeAlgorithm);

int EncryptPartitionInPlaceResume (HANDLE dev, volatile FORMAT_VOL_PARAMETERS *volParams, WipeAlgorithmId wipeAlgorithm, volatile BOOL *bTryToCorrectReadErrors);

void ShowInPlaceEncErrMsgWAltSteps (HWND hwndDlg, char *iniStrId, BOOL bErr);

void SetNonSysInplaceEncUIStatus (int nonSysInplaceEncStatus);

int FastVolumeHeaderUpdate (HANDLE dev, CRYPTO_INFO *headerCryptoInfo, CRYPTO_INFO *masterCryptoInfo, __int64 deviceSize);

static HANDLE OpenPartitionVolume (HWND hwndDlg, const char *devName, BOOL bExclusiveRequired, BOOL bSharedRequired, BOOL bSharedRequiresConfirmation, BOOL bShowAlternativeSteps, BOOL bSilent);

static int DismountFileSystem (HWND hwndDlg, HANDLE dev, int driveLetter, BOOL bForcedAllowed, BOOL bForcedRequiresConfirmation, BOOL bSilent);

static int ConcealNTFS (HANDLE dev);

static void ExportProgressStats (__int64 bytesDone, __int64 totalSize);

int ZeroUnreadableSectors (HANDLE dev, LARGE_INTEGER startOffset, int64 size, int sectorSize, uint64 *zeroedSectorCount);

static int OpenBackupHeader (HANDLE dev, const char *devicePath, Password *password, int pkcs5, PCRYPTO_INFO *retCryptoInfo, CRYPTO_INFO *headerCryptoInfo, __int64 deviceSize);

#define IDD_DEVICE_WIPE_MODE_PAGE_DLG 129

#define IDD_DEVICE_TRANSFORM_MODE_DLG 130

#define IDD_EXPANDED_LIST_SELECT_PAGE_DLG 131

#define IDC_BOX_TITLE 1000

#define IDC_RESCUE_DISK_ISO_PATH 1001

#define IDC_COMBO_BOX 1002

#define IDT_PASS 1100

#define IDC_DEVICE_TRANSFORM_MODE_FORMAT 1101

#define IDC_DEVICE_TRANSFORM_MODE_INPLACE 1102

// Next default values for new objects

//

#ifdef APSTUDIO_INVOKED

#ifndef APSTUDIO_READONLY_SYMBOLS

#define _APS_NO_MFC 1

#define _APS_NEXT_COMMAND_VALUE 40001

#define _APS_NEXT_SYMED_VALUE 101

#endif

#endif

NONSYS_INPLACE_ENC_RESUME_PARTITION_SEL_PAGE,

NONSYS_INPLACE_ENC_RAND_DATA_PAGE,

NONSYS_INPLACE_ENC_WIPE_MODE_PAGE,

FORMAT_PAGE,

FORMAT_FINISHED_PAGE,

SYSENC_HIDDEN_OS_INITIAL_INFO_PAGE,

BOOL bDirectSysEncMode = FALSE;

BOOL bDirectSysEncModeCommand = SYSENC_COMMAND_NONE;

BOOL DirectDeviceEncMode = FALSE;

BOOL DirectNonSysInplaceEncResumeMode = FALSE;

BOOL DirectPromptNonSysInplaceEncResumeMode = FALSE;

volatile BOOL bFirstNonSysInPlaceEncResumeDone = FALSE;

__int64 NonSysInplaceEncBytesDone = 0;

__int64 NonSysInplaceEncTotalSize = 0;

}

if (newWizardMode != WIZARD_MODE_NONSYS_DEVICE)

bInPlaceEncNonSys = FALSE;

if (newWizardMode == WIZARD_MODE_NONSYS_DEVICE && !IsAdmin() && IsUacSupported())

{

}

// The contents of the following items may be inappropriate after a change of mode

szDiskFile[0] = 0;

nUIVolumeSize = 0;

nVolumeSize = 0;

bHiddenVolDirect = FALSE;

bWholeSysDrive = FALSE;

bInPlaceEncNonSys = FALSE;

if (bDirectSysEncModeCommand == SYSENC_COMMAND_CREATE_HIDDEN_OS_ELEV)

{

return TRUE;

}

{

if (!IsAdmin() && IsUacSupported())

{

AbortProcessSilent ();

}

CreateNonSysInplaceEncMutex ();

bInPlaceEncNonSys = TRUE;

bInPlaceEncNonSysResumed = TRUE;

ChangeWizardMode (WIZARD_MODE_NONSYS_DEVICE);

LoadPage (MainDlg, NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE);

}

// Use this function e.g. if the config file with the system encryption settings was lost or not written

// correctly, and we don't know whether to encrypt or decrypt (but we know that encryption or decryption

// is required). Returns FALSE if failed or cancelled.

return;

}

bSystemEncryptionInProgress = FALSE;

WaitCursor ();

case NONSYS_INPLACE_ENC_STATUS_ENCRYPTING:

StringCbCopyW (nonSysInplaceEncUIStatus, sizeof(nonSysInplaceEncUIStatus), GetString ("PROGRESS_STATUS_ENCRYPTING"));

break;

case NONSYS_INPLACE_ENC_STATUS_FINALIZING:

StringCbCopyW (nonSysInplaceEncUIStatus, sizeof(nonSysInplaceEncUIStatus), GetString ("PROGRESS_STATUS_FINALIZING"));

break;

void UpdateNonSysInPlaceEncControls (void)

{

EnableWindow (GetDlgItem (hCurPage, IDC_PAUSE), bFirstNonSysInPlaceEncResumeDone

&& NonSysInplaceEncStatus != NONSYS_INPLACE_ENC_STATUS_FINALIZING

if (bVolTransformThreadRunning

&& (nonSysInplaceEncStatus == NONSYS_INPLACE_ENC_STATUS_ENCRYPTING

|| nonSysInplaceEncStatus == NONSYS_INPLACE_ENC_STATUS_FINALIZING

|| nonSysInplaceEncStatus == NONSYS_INPLACE_ENC_STATUS_FINISHED))

{

if (lastNonSysInplaceEncStatus != nonSysInplaceEncStatus

{

InitNonSysInplaceEncProgressBar ();

}

InitProgressBar (totalSize,

NonSysInplaceEncBytesDone,

TRUE,

TRUE,

TRUE);

volParams->hiddenVolHostSize = nHiddenVolHostSize;

volParams->ea = nVolumeEA;

volParams->pkcs5 = hash_algo;

volParams->fileSystem = fileSystem;

volParams->clusterSize = clusterSize;

volParams->sparseFileSwitch = bSparseFileSwitch;

volParams->password = &volumePassword;

volParams->hwndDlg = hwndDlg;

{

HANDLE hPartition = INVALID_HANDLE_VALUE;

SetNonSysInplaceEncUIStatus (NONSYS_INPLACE_ENC_STATUS_PREPARING);

}

else

{

InitProgressBar (GetVolumeDataAreaSize (bHidden, nVolumeSize), 0, FALSE, FALSE, FALSE, TRUE);

nStatus = TCFormatVolume (volParams);

&& nStatus == ERR_USER_ABORT

&& NonSysInplaceEncStatus == NONSYS_INPLACE_ENC_STATUS_FINISHED)

{

nStatus = ERR_SUCCESS;

}

SetLastError (dwWin32FormatError);

if ((bVolTransformThreadCancel || nStatus == ERR_USER_ABORT)

{

if (!bDevice && !(bHiddenVol && !bHiddenVolHost)) // If we're not creating a hidden volume and if it's a file container

{

else

{

SetNonSysInplaceEncUIStatus (NONSYS_INPLACE_ENC_STATUS_ERROR);

}

}

else if (!(bHiddenVolHost && hiddenVolHostDriveNo < 0)) // If the error was not that the hidden volume host could not be mounted (this error has already been reported to the user)

}

else if (bInPlaceEncNonSys)

{

}

else

{

(DLGPROC) PageDialogProc);

break;

hCurPage = CreateDialogW (hInst, MAKEINTRESOURCEW (IDD_INPLACE_ENCRYPTION_PAGE_DLG), hwndDlg,

(DLGPROC) PageDialogProc);

break;

hCurPage = CreateDialogW (hInst, MAKEINTRESOURCEW (IDD_INFO_PAGE_DLG), hwndDlg,

(DLGPROC) PageDialogProc);

break;

case FORMAT_PAGE:

hCurPage = CreateDialogW (hInst, MAKEINTRESOURCEW (IDD_FORMAT_PAGE_DLG), hwndDlg,

(DLGPROC) PageDialogProc);

if (bHiddenOS && bHiddenVolHost)

StringCbPrintfW (szTmp, sizeof(szTmp), GetString ("OVERWRITEPROMPT_DEVICE_HIDDEN_OS_PARTITION"), szFileName, drive);

else

x = MessageBoxW (MainDlg, szTmp, lpszTitle, YES_NO | MB_ICONWARNING | (bInPlaceEncNonSys ? MB_DEFBUTTON1 : MB_DEFBUTTON2));

return TRUE;

}

void HandleOldAssignedDriveLetter (void)

{

if (bDevice)

not. - see DialogProc */

BOOL CALLBACK PageDialogProc (HWND hwndDlg, UINT uMsg, WPARAM wParam, LPARAM lParam)

{

WORD lw = LOWORD (wParam);

WORD hw = HIWORD (wParam);

case WM_INITDIALOG:

LocalizeDialog (hwndDlg, "IDD_VOL_CREATION_WIZARD_DLG");

switch (nCurPageNo)

{

SetCheckBox (hwndDlg, IDC_KEYFILES_ENABLE, KeyFilesEnable);

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString (bInPlaceEncNonSys ? "PASSWORD" : "PASSWORD_HIDVOL_HOST_TITLE"));

break;

if (bInPlaceEncNonSysResumed)

{

nWipeMode = savedWipeAlgorithm;

}

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDCANCEL), GetString (bInPlaceEncNonSysResumed ? "DEFER" : "CANCEL"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_PAUSE), GetString ("IDC_PAUSE"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDCANCEL), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDHELP), TRUE);

ShowWindow (GetDlgItem (hwndDlg, IDC_MORE_INFO_SYS_ENCRYPTION), SW_HIDE);

break;

bConfirmQuit = FALSE;

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("FINALIZE"));

break;

case FORMAT_PAGE:

{

BOOL bNTFSallowed = FALSE;

}

break;

{

switch (lw)

{

KillTimer (hwndDlg, TIMER_ID_SYSENC_PROGRESS);

try

{

if (BootEncStatus.DriveMounted) // If we had been really encrypting/decrypting (not just proceeding to deinstall)

if (!bVolTransformThreadRunning && !bVolTransformThreadToRun)

{

KillTimer (hwndDlg, TIMER_ID_NONSYS_INPLACE_ENC_PROGRESS);

}

UpdateNonSysInPlaceEncControls ();

// The driver stopped wiping

KillTimer (hwndDlg, TIMER_ID_WIPE_PROGRESS);

try

{

KillTimer (hwndDlg, TIMER_ID_NONSYS_INPLACE_ENC_PROGRESS);

return 1;

case TC_APPMSG_VOL_TRANSFORM_THREAD_ENDED:

case TC_APPMSG_FORMAT_USER_QUIT:

&& (bVolTransformThreadRunning || bVolTransformThreadToRun || bInPlaceEncNonSysResumed))

{

// Non-system encryption in progress

}

}

}

{

/* Scan all available partitions to discover all partitions where non-system in-place

BOOL tmpbDevice;

return 1;

}

}

NormalCursor();

}

}

else if (nCurPageNo == FILESYS_PAGE)

}

else if (nCurPageNo == NONSYS_INPLACE_ENC_RESUME_PARTITION_SEL_PAGE)

{

}

{

/* In-place encryption start (the 'Next' button has been clicked) */

NonSysInplaceEncResume ();

return 1;

}

{

PostMessage (hwndDlg, TC_APPMSG_FORMAT_USER_QUIT, 0, 0);

return 1;

}

else if (nCurPageNo == FORMAT_PAGE)

{

/* Format start (the 'Next' button has been clicked on the Format page) */

CommandDecryptSysEnc,

CommandEncDev,

CommandHiddenSys,

CommandResumeHiddenSys,

CommandSysEnc,

CommandResumeInplace,

};

argument args[]=

{

{ OptionHistory, "/history", "/h", FALSE },

{ OptionNoIsoCheck, "/noisocheck", "/n", FALSE },

{ OptionTokenLib, "/tokenlib", NULL, FALSE },

{ OptionQuit, "/quit", "/q", FALSE },

{ CommandResumeSysEncLogOn, "/acsysenc", "/a", TRUE },

{ CommandResumeSysEnc, "/csysenc", "/c", TRUE },

{ CommandDecryptSysEnc, "/dsysenc", "/d", TRUE },

{ CommandEncDev, "/encdev", "/e", TRUE },

{ CommandHiddenSys, "/isysenc", "/i", TRUE },

{ CommandResumeHiddenSys, "/risysenc", "/r", TRUE },

{ CommandSysEnc, "/sysenc", "/s", TRUE },

{ CommandResumeInplace, "/zinplace", "/z", TRUE }

};

DirectDeviceEncMode = TRUE;

break;

case CommandResumeInplace:

// Resume interrupted process of non-system in-place encryption of a partition

DirectNonSysInplaceEncResumeMode = TRUE;

break;

// Ask the user whether to resume interrupted process of non-system in-place encryption of a partition

// This switch is passed only by the system (from the startup sequence).

DirectPromptNonSysInplaceEncResumeMode = TRUE;

else

{

// Nothing to resume

EndMainDlg (MainDlg);

return;

&& !bInPlaceEncNonSysPending)

{

// This instance of the wizard has been launched via the system startup sequence to prompt for resume of

// has been interrupted. This inconsistency may occur, for example, when the process is finished

// but the wizard is not removed from the startup sequence because system encryption is in progress.

// Therefore, we remove it from the startup sequence now if possible.

AbortProcessSilent ();

}

{

return;

}

else if (DirectPromptNonSysInplaceEncResumeMode)

if (NonSysInplaceEncInProgressElsewhere ())

AbortProcessSilent ();

else

AbortProcessSilent ();

}

else if (bInPlaceEncNonSysPending

&& !NonSysInplaceEncInProgressElsewhere ()

{

return;

}

void EnableDisableFileNext ( HWND hComboBox , HWND hMainButton );

BOOL QueryFreeSpace ( HWND hwndDlg , HWND hwndTextBox , BOOL display );

static BOOL FinalPreTransformPrompts (void);

void HandleOldAssignedDriveLetter (void);

void AddCipher ( HWND hComboBox , char *lpszCipher , int nCipher );

BOOL CALLBACK PageDialogProc ( HWND hwndDlg , UINT uMsg , WPARAM wParam , LPARAM lParam );

extern volatile BOOL bInPlaceEncNonSysResumed;

extern volatile BOOL bFirstNonSysInPlaceEncResumeDone;

extern volatile BOOL bInPlaceEncNonSys;

extern __int64 NonSysInplaceEncBytesDone;

extern __int64 NonSysInplaceEncTotalSize;

extern int nPbar;

return FALSE;

}

void LoadSettings (HWND hwndDlg)

{

EnableHwEncryption ((ReadDriverConfigurationFlags() & TC_DRIVER_CONFIG_DISABLE_HARDWARE_ENCRYPTION) ? FALSE : TRUE);

return (BootEncStatus.DriveMounted);

}

BOOL WholeSysDriveEncryption (BOOL bSilent)

{

try

// Returns TRUE if the host drive of the specified partition contains a portion of the TrueCrypt Boot Loader

// and if the drive is not within key scope of active system encryption (e.g. the system drive of the running OS).

// If bPrebootPasswordDlgMode is TRUE, this function returns FALSE (because the check would be redundant).

{

try

{

int driveNo;

char parentDrivePath [TC_MAX_PATH+1];

if (bPrebootPasswordDlgMode)

return FALSE;

if (sscanf (szDevicePath, "\\Device\\Harddisk%d\\Partition", &driveNo) != 1)

return FALSE;

static void LaunchVolCreationWizard (HWND hwndDlg, const char *arg)

{

char *tmp;

GetModuleFileName (NULL, t+1, sizeof(t)-1);

item.mask = LVIF_PARAM;

item.iItem = hItem;

return MAKELONG (0xffff, 0xffff);

else

return item.lParam;

if (!MutexExistsOnSystem (TC_MUTEX_NAME_SYSENC)) // If no instance of the wizard is currently taking care of system encryption

{

}

else

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

if (!MutexExistsOnSystem (TC_MUTEX_NAME_SYSENC)) // If no instance of the wizard is currently taking care of system encryption

{

}

else

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

}

CloseSysEncMutex ();

}

else

Warning ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", hwndDlg);

// such information, but will exit (displaying only an error meessage).

Info("HIDDEN_OS_PREINFO", hwndDlg);

}

// Blindly attempts (without any checks) to instruct the wizard to resume whatever system encryption process

}

{

// IMPORTANT: This function must not check any config files! Otherwise, if a config file was lost or corrupt,

// the user would not be able resume encryption and the data on the volume would be inaccessible.

}

BOOL SelectContainer (HWND hwndDlg)

if (bInPlaceEncNonSysPending && !NonSysInplaceEncInProgressElsewhere())

{

}

}

AppendMenuW (popup, MF_STRING, IDPM_ADD_TO_FAVORITES, GetString ("IDPM_ADD_TO_FAVORITES"));

AppendMenuW (popup, MF_STRING, IDPM_ADD_TO_SYSTEM_FAVORITES, GetString ("IDPM_ADD_TO_SYSTEM_FAVORITES"));

AppendMenu (popup, MF_SEPARATOR, 0, "");

AppendMenuW (popup, MF_STRING, IDM_VOLUME_PROPERTIES, GetString ("IDPM_PROPERTIES"));

break;

Dismount (hwndDlg, -2);

break;

case IDPM_OPEN_VOLUME:

{

int state = GetItemLong(GetDlgItem (hwndDlg, IDC_DRIVELIST), ((LPNMITEMACTIVATE)lParam)->iItem );

AppendMenuW (popup, MF_STRING, IDM_ADD_REMOVE_VOL_KEYFILES, GetString ("IDM_ADD_REMOVE_VOL_KEYFILES"));

AppendMenuW (popup, MF_STRING, IDM_REMOVE_ALL_KEYFILES_FROM_VOL, GetString ("IDM_REMOVE_ALL_KEYFILES_FROM_VOL"));

AppendMenu (popup, MF_SEPARATOR, 0, "");

AppendMenuW (popup, MF_STRING, IDM_BACKUP_VOL_HEADER, GetString ("IDM_BACKUP_VOL_HEADER"));

AppendMenuW (popup, MF_STRING, IDM_RESTORE_VOL_HEADER, GetString ("IDM_RESTORE_VOL_HEADER"));

}

switch (menuItem)

{

case IDM_CHANGE_PASSWORD:

if (!VolumeSelected(hwndDlg))

{

return 1;

}

if (lw == IDM_CHANGE_PASSWORD)

{

if (!VolumeSelected(hwndDlg))

if (lw == IDM_RESUME_INTERRUPTED_PROC)

{

return 1;

}

void LaunchVolCreationWizard (HWND hwndDlg);

BOOL WholeSysDriveEncryption (BOOL bSilent);

BOOL CheckSysEncMountWithoutPBA (HWND hwndDlg, const char *devicePath, BOOL quiet);

void CreateRescueDisk (HWND hwndDlg);

int BackupVolumeHeader (HWND hwndDlg, BOOL bRequireConfirmation, const char *lpszVolume);

int RestoreVolumeHeader (HWND hwndDlg, const char *lpszVolume);

MENUITEM "Select Device...", IDM_SELECT_DEVICE

MENUITEM SEPARATOR

MENUITEM "Create New Volume...", IDM_CREATE_VOLUME

MENUITEM "Resume Interrupted Process", IDM_RESUME_INTERRUPTED_PROC

MENUITEM SEPARATOR

MENUITEM "Mount Volume", IDM_MOUNT_VOLUME

#define IDM_DONATE 40064

#define IDM_VOLUME_EXPANDER 40065

#define IDM_DEFAULT_MOUNT_PARAMETERS 40066

// Next default values for new objects

//

#ifndef APSTUDIO_READONLY_SYMBOLS

#define _APS_NO_MFC 1

#define _APS_NEXT_RESOURCE_VALUE 119

#define _APS_NEXT_CONTROL_VALUE 1142

#define _APS_NEXT_SYMED_VALUE 101

#endif