#define TC_DRIVER_CONFIG_DISABLE_EVIL_MAID_ATTACK_DETECTION 0x20

#define TC_DRIVER_CONFIG_CACHE_BOOT_PIM 0x40

#define VC_DRIVER_CONFIG_ALLOW_NONSYS_TRIM 0x80

#endif /* _WIN32 */

<control lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</control>

<string lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</string>

<control lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM operation for non-system SSD partition/drive</control>

</localization>

<!-- XML Schema -->

<xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">

return status;

}

NTSTATUS DriveFilterDispatchIrp (PDEVICE_OBJECT DeviceObject, PIRP Irp)

{

case IRP_MJ_POWER:

return DispatchPower (DeviceObject, Irp, Extension, irpSp);

}

status = IoAcquireRemoveLock (&Extension->Queue.RemoveLock, Irp);

BOOL CacheBootPassword = FALSE;

BOOL CacheBootPim = FALSE;

BOOL NonAdminSystemFavoritesAccessDisabled = FALSE;

static size_t EncryptionThreadPoolFreeCpuCountLimit = 0;

static BOOL SystemFavoriteVolumeDirty = FALSE;

static BOOL PagingFileCreationPrevented = FALSE;

if (flags & TC_DRIVER_CONFIG_CACHE_BOOT_PIM)

CacheBootPim = TRUE;

}

EnableHwEncryption ((flags & TC_DRIVER_CONFIG_DISABLE_HARDWARE_ENCRYPTION) ? FALSE : TRUE);

extern BOOL VolumeClassFilterRegistered;

extern BOOL CacheBootPassword;

extern BOOL CacheBootPim;

/* Helper macro returning x seconds in units of 100 nanoseconds */

#define WAIT_SECONDS(x) ((x)*10000000)

uint16 bootLoaderVersion = 0;

BOOL bPasswordCacheEnabled = (driverConfig & TC_DRIVER_CONFIG_CACHE_BOOT_PASSWORD)? TRUE : FALSE;

BOOL bPimCacheEnabled = (driverConfig & TC_DRIVER_CONFIG_CACHE_BOOT_PIM)? TRUE : FALSE;

if (!BootEncObj->ReadBootSectorConfig (nullptr, 0, &userConfig, &customUserMessage, &bootLoaderVersion))

{

CheckDlgButton (hwndDlg, IDC_BOOT_LOADER_CACHE_PASSWORD, bPasswordCacheEnabled ? BST_CHECKED : BST_UNCHECKED);

EnableWindow (GetDlgItem (hwndDlg, IDC_BOOT_LOADER_CACHE_PIM), bPasswordCacheEnabled);

CheckDlgButton (hwndDlg, IDC_BOOT_LOADER_CACHE_PIM, (bPasswordCacheEnabled && bPimCacheEnabled)? BST_CHECKED : BST_UNCHECKED);

}

catch (Exception &e)

{

{

BOOL bPasswordCacheEnabled = IsDlgButtonChecked (hwndDlg, IDC_BOOT_LOADER_CACHE_PASSWORD);

BOOL bPimCacheEnabled = IsDlgButtonChecked (hwndDlg, IDC_BOOT_LOADER_CACHE_PIM);

BootEncObj->WriteBootSectorUserConfig (userConfig, customUserMessage, prop.volumePim, prop.pkcs5);

SetDriverConfigurationFlag (TC_DRIVER_CONFIG_CACHE_BOOT_PASSWORD, bPasswordCacheEnabled);

SetDriverConfigurationFlag (TC_DRIVER_CONFIG_CACHE_BOOT_PIM, (bPasswordCacheEnabled && bPimCacheEnabled)? TRUE : FALSE);

SetDriverConfigurationFlag (TC_DRIVER_CONFIG_DISABLE_EVIL_MAID_ATTACK_DETECTION, IsDlgButtonChecked (hwndDlg, IDC_DISABLE_EVIL_MAID_ATTACK_DETECTION));

}

catch (Exception &e)

{

LTEXT "",IDT_PKCS11_LIB_HELP,16,63,286,65

END

STYLE DS_SETFONT | DS_MODALFRAME | DS_FIXEDSYS | DS_CENTER | WS_POPUP | WS_CAPTION | WS_SYSMENU

CAPTION "VeraCrypt - System Encryption Settings"

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

GROUPBOX "Boot Loader Screen Options",IDT_BOOT_LOADER_SCREEN_OPTIONS,8,7,355,45

CONTROL "Do not request PIM in the pre-boot authentication screen (PIM value is stored unencrypted on disk)",IDC_DISABLE_BOOT_LOADER_PIM_PROMPT,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,18,20,339,9

CONTROL "Do not request Hash algorithm in the pre-boot authentication screen",IDC_DISABLE_BOOT_LOADER_HASH_PROMPT,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,18,35,339,9

END

IDD_PERFORMANCE_SETTINGS DIALOGEX 0, 0, 371, 253

CONTROL "TrueCrypt Mode",IDC_TRUECRYPT_MODE,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,7,7,76,10

END

STYLE DS_SETFONT | DS_MODALFRAME | DS_FIXEDSYS | DS_CENTER | WS_POPUP | WS_CAPTION | WS_SYSMENU

CAPTION "VeraCrypt - System Encryption Settings"

FONT 8, "MS Shell Dlg", 400, 0, 0x1

CONTROL "Do not &show any texts in the pre-boot authentication screen (except the below custom message)",IDC_DISABLE_BOOT_LOADER_OUTPUT,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,18,20,339,9

EDITTEXT IDC_CUSTOM_BOOT_LOADER_MESSAGE,18,50,216,14,ES_AUTOHSCROLL

CONTROL "&Cache pre-boot authentication password in driver memory (for mounting of non-system volumes)",IDC_BOOT_LOADER_CACHE_PASSWORD,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,18,192,339,10

CONTROL "Allow pre-boot &authentication to be bypassed by pressing the Esc key (enables boot manager)",IDC_ALLOW_ESC_PBA_BYPASS,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,18,222,340,10

CONTROL "Disable ""Evil Maid"" attack detection",IDC_DISABLE_EVIL_MAID_ATTACK_DETECTION,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,18,237,340,10

END

/////////////////////////////////////////////////////////////////////////////

IDD_EFI_SYSENC_SETTINGS, DIALOG

BEGIN

LEFTMARGIN, 7

TOPMARGIN, 7

END

IDD_PERFORMANCE_SETTINGS, DIALOG

IDD_SYSENC_SETTINGS, DIALOG

BEGIN

LEFTMARGIN, 7

TOPMARGIN, 7

END

END

#endif // APSTUDIO_INVOKED

#define IDC_EDIT_DCSPROP 1165

#define IDT_ADVANCED_OPTIONS 1166

#define IDC_ALLOW_TRIM_NONSYS_SSD 1167

#define IDM_HELP 40001

#define IDM_ABOUT 40002

#define IDM_UNMOUNT_VOLUME 40003

#define _APS_NO_MFC 1

#define _APS_NEXT_RESOURCE_VALUE 120

#define _APS_NEXT_COMMAND_VALUE 40069

#define _APS_NEXT_SYMED_VALUE 101

#endif

#endif