+#include "XZip.h"

+#include "XUnzip.h"

+ size = (unsigned __int64) lSize.QuadPart;

+ void File::GetFileSize (DWORD& dwSize)

+ {

+ unsigned __int64 size64;

+ GetFileSize (size64);

+ dwSize = (DWORD) size64;

+ }

+

+ RescueZipData (nullptr),

+ RescueZipSize (0),

+ {

+ burn (RescueIsoImage, RescueIsoImageSize);

+ }

+ if (RescueZipData)

+ {

+ burn (RescueZipData, RescueZipSize);

+ delete [] RescueZipData;

+ }

+ DWORD sizeBootMenuLocker;

+ byte *BootMenuLockerImg = MapResource(L"BIN", IDR_EFI_DCSBML, &sizeBootMenuLocker);

+ if (!BootMenuLockerImg)

+ throw ErrorException(L"Out of resource DcsBml", SRC_POS);

+ EfiBootInst.SaveFile(L"\\EFI\\VeraCrypt\\DcsBml.dcs", BootMenuLockerImg, sizeBootMenuLocker);

+ BOOL bIsGPT = GetSystemDriveConfiguration().SystemPartition.IsGPT;

+ if (bIsGPT)

+ {

+ // create EFI disk structure

+ DWORD sizeDcsBoot;

+ byte *dcsBootImg = MapResource(L"BIN", IDR_EFI_DCSBOOT, &sizeDcsBoot);

+ if (!dcsBootImg)

+ throw ParameterIncorrect (SRC_POS);

+ DWORD sizeDcsInt;

+ byte *dcsIntImg = MapResource(L"BIN", IDR_EFI_DCSINT, &sizeDcsInt);

+ if (!dcsIntImg)

+ throw ParameterIncorrect (SRC_POS);

+ DWORD sizeDcsCfg;

+ byte *dcsCfgImg = MapResource(L"BIN", IDR_EFI_DCSCFG, &sizeDcsCfg);

+ if (!dcsCfgImg)

+ throw ParameterIncorrect (SRC_POS);

+ DWORD sizeLegacySpeaker;

+ byte *LegacySpeakerImg = MapResource(L"BIN", IDR_EFI_LEGACYSPEAKER, &sizeLegacySpeaker);

+ if (!LegacySpeakerImg)

+ throw ParameterIncorrect (SRC_POS);

+ DWORD sizeBootMenuLocker;

+ byte *BootMenuLockerImg = MapResource(L"BIN", IDR_EFI_DCSBML, &sizeBootMenuLocker);

+ if (!BootMenuLockerImg)

+ throw ParameterIncorrect (SRC_POS);

+ DWORD sizeDcsRescue;

+ byte *DcsRescueImg = MapResource(L"BIN", IDR_EFI_DCSRE, &sizeDcsRescue);

+ if (!DcsRescueImg)

+ throw ParameterIncorrect (SRC_POS);

+ unsigned int maxRescueZipSize = 4 * 1024 * 1024;

+ ZRESULT res;

+ HZIP hz = CreateZip (0, maxRescueZipSize, ZIP_MEMORY);

+ if (!hz)

+ throw ParameterIncorrect (SRC_POS);

+

+ finally_do_arg (HZIP, hz, { CloseZip (finally_arg); });

+

+ if (ZR_OK != ZipAdd (hz, L"EFI/Boot/bootx64.efi", DcsRescueImg, sizeDcsRescue, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+ if (ZR_OK !=ZipAdd (hz, L"EFI/VeraCrypt/DcsBml.dcs", BootMenuLockerImg, sizeBootMenuLocker, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+ if (ZR_OK != ZipAdd (hz, L"EFI/VeraCrypt/DcsBoot.efi", dcsBootImg, sizeDcsBoot, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+ if (ZR_OK != ZipAdd (hz, L"EFI/VeraCrypt/DcsCfg.dcs", dcsCfgImg, sizeDcsCfg, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+ if (ZR_OK != ZipAdd (hz, L"EFI/VeraCrypt/DcsInt.dcs", dcsIntImg, sizeDcsInt, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+ if (ZR_OK != ZipAdd (hz, L"EFI/VeraCrypt/LegacySpeaker.dcs", LegacySpeakerImg, sizeLegacySpeaker, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+

+ Buffer volHeader(TC_BOOT_ENCRYPTION_VOLUME_HEADER_SIZE);

+

+ // Volume header

+ if (initialSetup)

+ {

+ if (!RescueVolumeHeaderValid)

+ throw ParameterIncorrect (SRC_POS);

+

+ memcpy (volHeader.Ptr (), RescueVolumeHeader, TC_BOOT_ENCRYPTION_VOLUME_HEADER_SIZE);

+ }

+ else

+ {

+ Device bootDevice (GetSystemDriveConfiguration().DevicePath, true);

+ bootDevice.CheckOpened (SRC_POS);

+ bootDevice.SeekAt (TC_BOOT_VOLUME_HEADER_SECTOR_OFFSET);

+ bootDevice.Read (volHeader.Ptr (), TC_BOOT_ENCRYPTION_VOLUME_HEADER_SIZE);

+ }

+

+ if (ZR_OK != ZipAdd (hz, L"EFI/VeraCrypt/svh_bak", volHeader.Ptr (), TC_BOOT_ENCRYPTION_VOLUME_HEADER_SIZE, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+

+ // Original system loader

+ res = ZR_WRITE;

+ try

+ {

+ DWORD fileSize = 0;

+ File sysBakFile (GetSystemLoaderBackupPath(), true);

+ sysBakFile.CheckOpened (SRC_POS);

+ sysBakFile.GetFileSize(fileSize);

+ Buffer fileBuf ((DWORD) fileSize);

+ DWORD sizeLoader = sysBakFile.Read (fileBuf.Ptr (), fileSize);

+ res = ZipAdd (hz, L"EFI/Boot/original_bootx64.vc_backup", fileBuf.Ptr (), sizeLoader, ZIP_MEMORY);

+ }

+ catch (Exception &e)

+ {

+ e.Show (ParentWindow);

+ Warning ("SYS_LOADER_UNAVAILABLE_FOR_RESCUE_DISK", ParentWindow);

+ }

+

+ if (res != ZR_OK)

+ throw ParameterIncorrect (SRC_POS);

+

+ EfiBootConf conf;

+ wstring dcsPropFileName = GetTempPathString() + L"_dcsproprescue";

+ finally_do_arg (wstring, dcsPropFileName, { DeleteFileW (finally_arg.c_str()); });

+ if (conf.Save(dcsPropFileName.c_str(), ParentWindow))

+ {

+ DWORD fileSize = 0;

+ File propFile (dcsPropFileName, true, false);

+ propFile.CheckOpened (SRC_POS);

+ propFile.GetFileSize(fileSize);

+ Buffer propBuf (fileSize);

+ DWORD sizeDcsProp = propFile.Read (propBuf.Ptr (), fileSize);

+

+ if (ZR_OK != ZipAdd (hz, L"EFI/VeraCrypt/DcsProp", propBuf.Ptr (), sizeDcsProp, ZIP_MEMORY))

+ throw ParameterIncorrect (SRC_POS);

+ }

+ else

+ void* pZipContent = NULL;

+ unsigned long ulZipSize = 0;

+ if (ZR_OK != ZipGetMemory (hz, &pZipContent, &ulZipSize))

+ throw ParameterIncorrect (SRC_POS);

+

+ RescueZipData = new byte[ulZipSize];

+ if (!RescueZipData)

+ throw bad_alloc();

+ memcpy (RescueZipData, pZipContent, ulZipSize);

+ RescueZipSize = ulZipSize;

+

+ if (!isoImagePath.empty())

+ {

+ File isoFile (isoImagePath, false, true);

+ isoFile.Write (RescueZipData, RescueZipSize);

+ }

+ Buffer imageBuf (RescueIsoImageSize);

+

+ byte *image = imageBuf.Ptr();

+ memset (image, 0, RescueIsoImageSize);

+

+ // Primary volume descriptor

+ const char* szPrimVolDesc = "\001CD001\001";

+ const char* szPrimVolLabel = "VeraCrypt Rescue Disk ";

+ memcpy (image + 0x8000, szPrimVolDesc, strlen(szPrimVolDesc) + 1);

+ memcpy (image + 0x7fff + 41, szPrimVolLabel, strlen(szPrimVolLabel) + 1);

+ *(uint32 *) (image + 0x7fff + 81) = RescueIsoImageSize / 2048;

+ *(uint32 *) (image + 0x7fff + 85) = BE32 (RescueIsoImageSize / 2048);

+ image[0x7fff + 121] = 1;

+ image[0x7fff + 124] = 1;

+ image[0x7fff + 125] = 1;

+ image[0x7fff + 128] = 1;

+ image[0x7fff + 130] = 8;

+ image[0x7fff + 131] = 8;

+

+ image[0x7fff + 133] = 10;

+ image[0x7fff + 140] = 10;

+ image[0x7fff + 141] = 0x14;

+ image[0x7fff + 157] = 0x22;

+ image[0x7fff + 159] = 0x18;

+

+ // Boot record volume descriptor

+ const char* szBootRecDesc = "CD001\001EL TORITO SPECIFICATION";

+ memcpy (image + 0x8801, szBootRecDesc, strlen(szBootRecDesc) + 1);

+ image[0x8800 + 0x47] = 0x19;

+

+ // Volume descriptor set terminator

+ const char* szVolDescTerm = "\377CD001\001";

+ memcpy (image + 0x9000, szVolDescTerm, strlen(szVolDescTerm) + 1);

+

+ // Path table

+ image[0xA000 + 0] = 1;

+ image[0xA000 + 2] = 0x18;

+ image[0xA000 + 6] = 1;

+

+ // Root directory

+ image[0xc000 + 0] = 0x22;

+ image[0xc000 + 2] = 0x18;

+ image[0xc000 + 9] = 0x18;

+ image[0xc000 + 11] = 0x08;

+ image[0xc000 + 16] = 0x08;

+ image[0xc000 + 25] = 0x02;

+ image[0xc000 + 28] = 0x01;

+ image[0xc000 + 31] = 0x01;

+ image[0xc000 + 32] = 0x01;

+ image[0xc000 + 34] = 0x22;

+ image[0xc000 + 36] = 0x18;

+ image[0xc000 + 43] = 0x18;

+ image[0xc000 + 45] = 0x08;

+ image[0xc000 + 50] = 0x08;

+ image[0xc000 + 59] = 0x02;

+ image[0xc000 + 62] = 0x01;

+ *(uint32 *) (image + 0xc000 + 65) = 0x010101;

+

+ // Validation entry

+ image[0xc800] = 1;

+ int offset = 0xc800 + 0x1c;

+ image[offset++] = 0xaa;

+ image[offset++] = 0x55;

+ image[offset++] = 0x55;

+ image[offset] = 0xaa;

+

+ // Initial entry

+ offset = 0xc820;

+ image[offset++] = 0x88;

+ image[offset++] = 2;

+ image[0xc820 + 6] = 1;

+ image[0xc820 + 8] = TC_CD_BOOT_LOADER_SECTOR;

+

+ // TrueCrypt Boot Loader

+ CreateBootLoaderInMemory (image + TC_CD_BOOTSECTOR_OFFSET, TC_BOOT_LOADER_AREA_SIZE, true);

+

+ // Volume header

+ if (initialSetup)

+ {

+ if (!RescueVolumeHeaderValid)

+ throw ParameterIncorrect (SRC_POS);

+ memcpy (image + TC_CD_BOOTSECTOR_OFFSET + TC_BOOT_VOLUME_HEADER_SECTOR_OFFSET, RescueVolumeHeader, TC_BOOT_ENCRYPTION_VOLUME_HEADER_SIZE);

+ }

+ else

+ {

+ Device bootDevice (GetSystemDriveConfiguration().DevicePath, true);

+ bootDevice.CheckOpened (SRC_POS);

+ bootDevice.SeekAt (TC_BOOT_VOLUME_HEADER_SECTOR_OFFSET);

+ bootDevice.Read (image + TC_CD_BOOTSECTOR_OFFSET + TC_BOOT_VOLUME_HEADER_SECTOR_OFFSET, TC_BOOT_ENCRYPTION_VOLUME_HEADER_SIZE);

+ }

+

+ // Original system loader

+ try

+ {

+ File sysBakFile (GetSystemLoaderBackupPath(), true);

+ sysBakFile.CheckOpened (SRC_POS);

+ sysBakFile.Read (image + TC_CD_BOOTSECTOR_OFFSET + TC_ORIG_BOOT_LOADER_BACKUP_SECTOR_OFFSET, TC_BOOT_LOADER_AREA_SIZE);

+ image[TC_CD_BOOTSECTOR_OFFSET + TC_BOOT_SECTOR_CONFIG_OFFSET] |= TC_BOOT_CFG_FLAG_RESCUE_DISK_ORIG_SYS_LOADER;

+ }

+ catch (Exception &e)

+ {

+ e.Show (ParentWindow);

+ Warning ("SYS_LOADER_UNAVAILABLE_FOR_RESCUE_DISK", ParentWindow);

+ }

+ // Boot loader backup

+ CreateBootLoaderInMemory (image + TC_CD_BOOTSECTOR_OFFSET + TC_BOOT_LOADER_BACKUP_RESCUE_DISK_SECTOR_OFFSET, TC_BOOT_LOADER_AREA_SIZE, false);

+ RescueIsoImage = new byte[RescueIsoImageSize];

+ if (!RescueIsoImage)

+ throw bad_alloc();

+ memcpy (RescueIsoImage, image, RescueIsoImageSize);

+ if (!isoImagePath.empty())

+ {

+ File isoFile (isoImagePath, false, true);

+ isoFile.Write (image, RescueIsoImageSize);

+ }

+ BOOL bIsGPT = GetSystemDriveConfiguration().SystemPartition.IsGPT;

+ if ((bIsGPT && !RescueZipData) || (!bIsGPT && !RescueIsoImage))

+ if (bIsGPT)

+ {

+ const wchar_t* efiFiles[] = {

+ L"EFI/Boot/bootx64.efi",

+ L"EFI/VeraCrypt/DcsBml.dcs",

+ L"EFI/VeraCrypt/DcsBoot.efi",

+ L"EFI/VeraCrypt/DcsCfg.dcs",

+ L"EFI/VeraCrypt/DcsInt.dcs",

+ L"EFI/VeraCrypt/LegacySpeaker.dcs",

+ L"EFI/VeraCrypt/svh_bak",

+ L"EFI/Boot/original_bootx64.vc_backup"

+ };

+

+ ZRESULT res;

+ HZIP hz = OpenZip(RescueZipData, RescueZipSize, ZIP_MEMORY);

+ if (!hz)

+ throw ParameterIncorrect (SRC_POS);

+ finally_do_arg (HZIP, hz, { CloseZip (finally_arg); });

+

+ for (WCHAR drive = L'Z'; drive >= L'C'; --drive)

+ {

+ try

+ {

+ WCHAR rootPath[4] = { drive, L':', L'\\', 0};

+ UINT driveType = GetDriveType (rootPath);

+ if (DRIVE_REMOVABLE == driveType)

+ {

+ // check if it is FAT/FAT32

+ WCHAR szNameBuffer[TC_MAX_PATH];

+ if (GetVolumeInformationW (rootPath, NULL, 0, NULL, NULL, NULL, szNameBuffer, ARRAYSIZE(szNameBuffer))

+ && !wcsncmp (szNameBuffer, L"FAT", 3))

+ {

+ int index, i;

+ ZIPENTRYW ze;

+ for (i = 0; i < ARRAYSIZE(efiFiles); i++)

+ {

+ bool bMatch = false;

+ res = FindZipItemW (hz, efiFiles[i], true, &index, &ze);

+ if ((res == ZR_OK) && (index >= 0))

+ {

+ // check that the file exists on the disk and that it has the same content

+ StringCbCopyW (szNameBuffer, sizeof (szNameBuffer), rootPath);

+ StringCbCatW (szNameBuffer, sizeof (szNameBuffer), efiFiles[i]);

+

+ try

+ {

+ DWORD dwSize = 0;

+ File diskFile (szNameBuffer, true);

+ diskFile.CheckOpened (SRC_POS);

+ diskFile.GetFileSize (dwSize);

+ if (dwSize == (DWORD) ze.unc_size)

+ {

+ Buffer fileBuf (dwSize);

+ if (dwSize == diskFile.Read (fileBuf.Ptr (), dwSize))

+ {

+ Buffer efiBuf (dwSize);

+ res = UnzipItem (hz, ze.index, efiBuf.Ptr (), dwSize, ZIP_MEMORY);

+ if (res == ZR_OK)

+ {

+ bMatch = (memcmp (efiBuf.Ptr(), fileBuf.Ptr(), dwSize) == 0);

+ }

+ }

+ }

+ }

+ catch (...)

+ {

+ }

+

+ }

+ else

+ {

+ // entry not found in our Rescue ZIP image. Skip it.

+ bMatch = true;

+ }

+

+ if (!bMatch)

+ break;

+ }

+

+ if (i == ARRAYSIZE(efiFiles))

+ {

+ // All entries processed

+ return true;

+ }

+ }

+ }

+ }

+ catch (...) { }

+ }

+ }

+ else

+ size_t verifiedSectorCount = (TC_CD_BOOTSECTOR_OFFSET + TC_ORIG_BOOT_LOADER_BACKUP_SECTOR_OFFSET + TC_BOOT_LOADER_AREA_SIZE) / 2048;

+ Buffer buffer ((verifiedSectorCount + 1) * 2048);

+ for (WCHAR drive = L'Z'; drive >= L'C'; --drive)

+ try

+ WCHAR rootPath[4] = { drive, L':', L'\\', 0};

+ UINT driveType = GetDriveType (rootPath);

+ // check that it is a CD/DVD drive or a removable media in case a bootable

+ // USB key was created from the rescue disk ISO file

+ if ((DRIVE_CDROM == driveType) || (DRIVE_REMOVABLE == driveType))

+ {

+ rootPath[2] = 0; // remove trailing backslash

+ Device driveDevice (rootPath, true);

+ driveDevice.CheckOpened (SRC_POS);

+ DWORD bytesRead = driveDevice.Read (buffer.Ptr(), (DWORD) buffer.Size());

+ if (bytesRead != buffer.Size())

+ continue;

+ if (memcmp (buffer.Ptr(), RescueIsoImage, buffer.Size()) == 0)

+ return true;

+ }

+ catch (...) { }

+ bool BootEncryption::VerifyRescueDiskImage (const wchar_t* imageFile)

+ BOOL bIsGPT = GetSystemDriveConfiguration().SystemPartition.IsGPT;

+ if ((bIsGPT && !RescueZipData) || (!bIsGPT && !RescueIsoImage))

+ if (bIsGPT)

+ try

+ {

+ DWORD dwSize = 0;

+ File rescueFile (imageFile, true);

+ rescueFile.CheckOpened (SRC_POS);

+ rescueFile.GetFileSize (dwSize);

+ Buffer rescueData (dwSize);

+ if (dwSize == rescueFile.Read (rescueData.Ptr (), dwSize))

+ {

+ ZRESULT res;

+ HZIP hzFile = OpenZip(rescueData.Ptr (), dwSize, ZIP_MEMORY);

+ if (hzFile)

+ {

+ finally_do_arg (HZIP, hzFile, { CloseZip (finally_arg); });

+ HZIP hzMem = OpenZip(RescueZipData, RescueZipSize, ZIP_MEMORY);

+ if (hzMem)

+ {

+ finally_do_arg (HZIP, hzMem, { CloseZip (finally_arg); });

+ const wchar_t* efiFiles[] = {

+ L"EFI/Boot/bootx64.efi",

+ L"EFI/VeraCrypt/DcsBml.dcs",

+ L"EFI/VeraCrypt/DcsBoot.efi",

+ L"EFI/VeraCrypt/DcsCfg.dcs",

+ L"EFI/VeraCrypt/DcsInt.dcs",

+ L"EFI/VeraCrypt/LegacySpeaker.dcs",

+ L"EFI/VeraCrypt/svh_bak",

+ L"EFI/Boot/original_bootx64.vc_backup"

+ };

+

+ int index, i;

+ ZIPENTRYW zeFile, zeMem;

+ for (i = 0; i < ARRAYSIZE(efiFiles); i++)

+ {

+ bool bMatch = false;

+ res = FindZipItemW (hzMem, efiFiles[i], true, &index, &zeMem);

+ if ((res == ZR_OK) && (index >= 0))

+ {

+ res = FindZipItemW (hzFile, efiFiles[i], true, &index, &zeFile);

+ if ((res == ZR_OK) && (index >= 0) && (zeMem.unc_size == zeFile.unc_size))

+ {

+ Buffer fileBuf (zeFile.unc_size);

+ Buffer memBuf (zeFile.unc_size);

+

+ res = UnzipItem (hzMem, zeMem.index, memBuf.Ptr (), zeMem.unc_size, ZIP_MEMORY);

+ if (res == ZR_OK)

+ {

+ res = UnzipItem (hzFile, zeFile.index, fileBuf.Ptr (), zeFile.unc_size, ZIP_MEMORY);

+ if (res == ZR_OK)

+ {

+ bMatch = (memcmp (memBuf.Ptr (), fileBuf.Ptr (), zeMem.unc_size) == 0);

+ }

+ }

+ }

+

+ }

+ else

+ {

+ // entry not found in our internal Rescue ZIP image. Skip it.

+ bMatch = true;

+ }

+

+ if (!bMatch)

+ break;

+ }

+

+ if (i == ARRAYSIZE(efiFiles))

+ {

+ // All entries processed

+ return true;

+ }

+

+

+ }

+ }

+ }

+ }

+ catch (...) { }

+ }

+ else

+ {

+ try

+ File rescueFile (imageFile, true);

+ rescueFile.CheckOpened (SRC_POS);

+ size_t verifiedSectorCount = (TC_CD_BOOTSECTOR_OFFSET + TC_ORIG_BOOT_LOADER_BACKUP_SECTOR_OFFSET + TC_BOOT_LOADER_AREA_SIZE) / 2048;

+ Buffer buffer ((verifiedSectorCount + 1) * 2048);

+

+ DWORD bytesRead = rescueFile.Read (buffer.Ptr(), (DWORD) buffer.Size());

+ if ( (bytesRead == buffer.Size())

+ && (memcmp (buffer.Ptr(), RescueIsoImage, buffer.Size()) == 0)

+ )

+ {

+ return true;

+ }

+ catch (...) { }

+ EfiBootInst.DelFile(L"\\EFI\\VeraCrypt\\DcsBml.dcs");

+ void GetFileSize (DWORD& dwSize);

+ bool VerifyRescueDiskImage (const wchar_t* imageFile);

+ byte *RescueZipData;

+ unsigned long RescueZipSize;

+IDR_EFI_DCSBML BIN "..\\Boot\\EFI\\DcsBml.efi"

+IDR_EFI_DCSRE BIN "..\\Boot\\EFI\\DcsRe.efi"

+ <control lang="en" key="IDM_VERIFY_RESCUE_DISK_ISO">Verify Rescue Disk Image</control>

+ <string lang="en" key="RESCUE_DISK_NON_WIZARD_CREATION_SELECT_PATH">After you click OK, you will select a filename for the new VeraCrypt Rescue Disk image and the location where you wish to place it.</string>

+ <string lang="en" key="RESCUE_DISK_NON_WIZARD_CHECK_INSERT">Please insert your VeraCrypt Rescue Disk and click OK to verify it.</string>

+ <string lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_PASSED">The VeraCrypt Rescue Disk image has been successfully verified.</string>

+ <string lang="en" key="RESCUE_DISK_ISO_IMAGE_CHECK_FAILED">The Rescue Disk image verification failed.\n\nIf you attempted to verify a VeraCrypt Rescue Disk image created for a different master key, password, salt, etc., please note that such Rescue Disk image will always fail this verification. To create a new Rescue Disk image fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</string>

+ <string lang="en" key="RESCUE_DISK_EFI_INFO">Before you can encrypt the partition, you must create a VeraCrypt Rescue Disk (VRD), which serves the following purposes:\n\n- If the VeraCrypt Boot Loader, master key, or other critical data gets damaged, the VRD allows you to restore it (note, however, that you will still have to enter the correct password then).\n\n- If Windows gets damaged and cannot start, the VRD allows you to permanently decrypt the partition before Windows starts.\n\n- The VRD will contain a backup of the present EFI boot loader and will allow you to restore it if necessary.\n\nThe VeraCrypt Rescue Disk ZIP image will be created in the location specified below.</string>

+ <string lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you need to extract it to a USB stick that is formatted as FAT/FAT32.\n\n%lsAfter you create the Rescue Disk, click Next to verify that it has been correctly created.</string>

+ <string lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you should either extract the image to a USB stick that is formatted as FAT/FAT32 or move it to a safe location for later use.\n\n%lsClick Next to continue.</string>

+ <string lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</string>

+ <string lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</string>

+ <string lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</string>

+ <string lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</string>

+#define IDR_EFI_DCSBML 570

+#define IDR_EFI_DCSRE 571

+#define _APS_NEXT_RESOURCE_VALUE 572

+BOOL bSystemIsGPT = FALSE;

+

+ if (EAIsFormatEnabled (ea) && (!SysEncInEffect () || bSystemIsGPT || EAIsMbrSysEncEnabled (ea)))

+ hash_algo = bSystemIsGPT? SHA512 : DEFAULT_HASH_ALGORITHM_BOOT;

+ if (((hid == RIPEMD160) || !HashIsDeprecated (hid)) && (bSystemIsGPT || HashForSystemEncryption (hid)))

+ SetWindowTextW (GetDlgItem (hwndDlg, IDT_RESCUE_DISK_INFO), bSystemIsGPT? GetString ("RESCUE_DISK_EFI_INFO"): GetString ("RESCUE_DISK_INFO"));

+ if (bSystemIsGPT)

+ {

+ StringCbPrintfW (szTmp, sizeof szTmp,

+ GetString (bDontVerifyRescueDisk ? "RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK" : "RESCUE_DISK_EFI_EXTRACT_INFO"),

+ szRescueDiskISO, GetString ("RESCUE_DISK_EFI_EXTRACT_INFO_NOTE"));

+ }

+ else

+ {

+ StringCbPrintfW (szTmp, sizeof szTmp,

+ GetString (bDontVerifyRescueDisk ? "RESCUE_DISK_BURN_INFO_NO_CHECK" : "RESCUE_DISK_BURN_INFO"),

+ szRescueDiskISO, IsWindowsIsoBurnerAvailable() ? L"" : GetString ("RESCUE_DISK_BURN_INFO_NONWIN_ISO_BURNER"));

+ }

+ if (bSystemIsGPT)

+ {

+ ShowWindow (GetDlgItem (hwndDlg, IDC_DOWNLOAD_CD_BURN_SOFTWARE), SW_HIDE);

+ }

+ else

+ {

+ if (IsWindowsIsoBurnerAvailable())

+ SetWindowTextW (GetDlgItem (hwndDlg, IDC_DOWNLOAD_CD_BURN_SOFTWARE), GetString ("LAUNCH_WIN_ISOBURN"));

+ ToHyperlink (hwndDlg, IDC_DOWNLOAD_CD_BURN_SOFTWARE);

+ if (IsWindowsIsoBurnerAvailable() && !bDontVerifyRescueDisk)

+ LaunchWindowsIsoBurner (hwndDlg, szRescueDiskISO);

+ }

+ }

+ (DLGPROC) BenchmarkDlgProc, (LPARAM) bSystemIsGPT);

+ if (!bSystemIsGPT && !HashForSystemEncryption(selectedAlgo))

+ try

+ {

+ bSystemIsGPT = BootEncObj->GetSystemDriveConfiguration().SystemPartition.IsGPT;

+ }

+ catch (...)

+ {

+ }

+

+ if (bSystemIsGPT)

+ StringCbCatW (szRescueDiskISO, sizeof(szRescueDiskISO), L"\\VeraCrypt Rescue Disk.zip");

+ else

+ StringCbCatW (szRescueDiskISO, sizeof(szRescueDiskISO), L"\\VeraCrypt Rescue Disk.iso");

+ if (!bSystemIsGPT && SysEncInEffect ()

+ if (!bSystemIsGPT)

+retryCDDriveCheck:

+ if (!bDontVerifyRescueDisk && !BootEncObj->IsCDRecorderPresent())

+ char *multiChoiceStr[] = { 0, "CD_BURNER_NOT_PRESENT",

+ "CD_BURNER_NOT_PRESENT_WILL_STORE_ISO",

+ "CD_BURNER_NOT_PRESENT_WILL_CONNECT_LATER",

+ "CD_BURNER_NOT_PRESENT_CONNECTED_NOW",

+ 0 };

+ switch (AskMultiChoice ((void **) multiChoiceStr, FALSE, hwndDlg))

+ {

+ case 1:

+ wchar_t msg[8192];

+ StringCchPrintfW (msg, array_capacity (msg), GetString ("CD_BURNER_NOT_PRESENT_WILL_STORE_ISO_INFO"), szRescueDiskISO);

+ WarningDirect (msg, hwndDlg);

+ Warning ("RESCUE_DISK_BURN_NO_CHECK_WARN", hwndDlg);

+ bDontVerifyRescueDisk = TRUE;

+ nNewPageNo = SYSENC_RESCUE_DISK_VERIFIED_PAGE;

+ break;

+ case 2:

+ AbortProcessSilent();

+ case 3:

+ break;

+

+ default:

+ goto retryCDDriveCheck;

+ }

+ if (IsWindowsIsoBurnerAvailable() && !bDontVerifyRescueDisk)

+ Info ("RESCUE_DISK_WIN_ISOBURN_PRELAUNCH_NOTE", hwndDlg);

+ }

+ if (bSystemIsGPT)

+ {

+ StringCbCopyW (szTmp, sizeof(szTmp), GetString ("RESCUE_DISK_EFI_CHECK_FAILED"));

+ }

+ else

+ {

+ StringCbPrintfW (szTmp, sizeof(szTmp), GetString ("RESCUE_DISK_CHECK_FAILED"),

+ IsWindowsIsoBurnerAvailable () ? L"" : GetString ("RESCUE_DISK_CHECK_FAILED_SENTENCE_APPENDIX"));

+ }

+BOOL bSystemIsGPT = FALSE;

+wchar_t szDefaultRescueDiskName[TC_MAX_PATH+1];

+wchar_t szRescueDiskExtension[4];

+

+ // disable hidden OS creation for GPT system encryption

+ if (bSystemIsGPT)

+ if (!IsHiddenOSRunning())

+ if (new_hash_algo_id != 0 && !bSystemIsGPT && !HashForSystemEncryption(new_hash_algo_id))

+ if (bSystemIsGPT || HashForSystemEncryption(i))

+ if (!BrowseFilesInDir (hwndDlg, "OPEN_TITLE", initialDir, szRescueDiskISO, FALSE, TRUE, NULL, szDefaultRescueDiskName, szRescueDiskExtension))

+ if (bSystemIsGPT)

+ StringCbPrintfW (szTmp, sizeof szTmp, GetString ("RESCUE_DISK_EFI_NON_WIZARD_CREATION"), szRescueDiskISO);

+ InfoDirect (szTmp, hwndDlg);

+ {

+ StringCbPrintfW (szTmp, sizeof szTmp,

+ GetString (IsWindowsIsoBurnerAvailable() ? "RESCUE_DISK_NON_WIZARD_CREATION_WIN_ISOBURN" : "RESCUE_DISK_NON_WIZARD_CREATION_BURN"),

+ szRescueDiskISO);

+

+ if (IsWindowsIsoBurnerAvailable())

+ {

+ if (AskYesNoString (szTmp, hwndDlg) == IDYES)

+ LaunchWindowsIsoBurner (MainDlg, szRescueDiskISO);

+ }

+ else

+ InfoDirect (szTmp, hwndDlg);

+ }

+static void VerifyRescueDisk (HWND hwndDlg, bool checkImageFile)

+ if (!checkImageFile && (AskOkCancel ("RESCUE_DISK_NON_WIZARD_CHECK_INSERT", hwndDlg) != IDOK))

+ if (checkImageFile)

+ wchar_t szRescueDiskImage [TC_MAX_PATH+1];

+ if (!BrowseFilesInDir (hwndDlg, "OPEN_TITLE", initialDir, szRescueDiskImage, FALSE, FALSE, NULL,szDefaultRescueDiskName, szRescueDiskExtension))

+ if (!BootEncObj->VerifyRescueDiskImage (szRescueDiskImage))

+ Error (bSystemIsGPT? "RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED" : "RESCUE_DISK_NON_WIZARD_CHECK_FAILED", hwndDlg);

+ Error (bSystemIsGPT? "RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED" : "RESCUE_DISK_NON_WIZARD_CHECK_FAILED", hwndDlg);

+ (DLGPROC) BenchmarkDlgProc, (LPARAM) bSystemIsGPT);

+ bSystemIsGPT = BootEncObj->GetSystemDriveConfiguration().SystemPartition.IsGPT;

+ if (bSystemIsGPT)

+ StringCbCopyW (szRescueDiskExtension, sizeof (szRescueDiskExtension), L"zip");

+ else

+ StringCbCopyW (szRescueDiskExtension, sizeof (szRescueDiskExtension), L"iso");

+

+ StringCbCopyW (szDefaultRescueDiskName, sizeof (szDefaultRescueDiskName), L"VeraCrypt Rescue Disk.");

+ StringCbCatW (szDefaultRescueDiskName, sizeof (szDefaultRescueDiskName), szRescueDiskExtension);

+

+ DialogBoxParamW (hInst, MAKEINTRESOURCEW (bSystemIsGPT? IDD_EFI_SYSENC_SETTINGS : IDD_SYSENC_SETTINGS), hwndDlg, (DLGPROC) BootLoaderPreferencesDlgProc, 0);

+ if (BootEncStatus.DriveMounted && !bSystemIsGPT)

+ if (bSystemIsGPT)

+ if (!bSystemIsGPT)

+ if (bSystemIsGPT)

+ MENUITEM "Verify Rescue Disk Image", IDM_VERIFY_RESCUE_DISK_ISO