+#pragma comment(lib, "Shlwapi.lib")

+#pragma comment(lib, "setupapi.lib" )

+#pragma comment(lib, "Wintrust.lib" )

+#pragma comment(lib, "Comctl32.lib" )

+ hResult = WinVerifyTrust(0, &gActionID, &WVTData);

+ PCRYPT_PROVIDER_DATA pProviderData = WTHelperProvDataFromStateData (WVTData.hWVTStateData);

+ PCRYPT_PROVIDER_SGNR pProviderSigner = WTHelperGetProvSignerFromChain (pProviderData, 0, FALSE, 0);

+ PCRYPT_PROVIDER_CERT pProviderCert = WTHelperGetProvCertFromChain (pProviderSigner, 0);

+ WinVerifyTrust(0, &gActionID, &WVTData);

+#ifndef SETUP_DLL

+// Use an idea proposed in https://medium.com/@1ndahous3/safe-code-pitfalls-dll-side-loading-winapi-and-c-73baaf48bdf5

+// it allows to set safe DLL search mode for the entire process very early on, before even the CRT is initialized and global constructors are called

+#pragma comment(linker, "/ENTRY:CustomMainCrtStartup")

+extern "C" {

+ int wWinMainCRTStartup();

+ int APIENTRY CustomMainCrtStartup()

+ SetDefaultDllDirectoriesPtr SetDefaultDllDirectoriesFn = NULL;

+ SetDefaultDllDirectoriesFn = (SetDefaultDllDirectoriesPtr) GetProcAddress (GetModuleHandle(L"kernel32.dll"), "SetDefaultDllDirectories");

+ if (SetDefaultDllDirectoriesFn)

+ {

+ /* remove current directory from dll search path */

+ SetDllDirectoryW (L"");

+ // Force loading dlls from system32 directory only

+ SetDefaultDllDirectoriesFn (LOAD_LIBRARY_SEARCH_SYSTEM32);

+ }

+ return wWinMainCRTStartup();

+#endif

+ SetDefaultDllDirectoriesPtr SetDefaultDllDirectoriesFn = NULL;

+#if !defined(SETUP)

+ InitOSVersionInfo();

+ if (!IsOSAtLeast (WIN_7))

+ // abort using a message that says that VeraCrypt can run only on Windows 7 and later and that it is officially supported only on Windows 10 and later

+ AbortProcessDirect(L"VeraCrypt requires at least Windows 7 to run.");

+ SetDefaultDllDirectoriesFn = (SetDefaultDllDirectoriesPtr) GetProcAddress (GetModuleHandle(L"kernel32.dll"), "SetDefaultDllDirectories");

+ if (!SetDefaultDllDirectoriesFn)

+ // This can happen only if KB2533623 is missing from Windows 7

+ AbortProcessDirect(L"VeraCrypt requires KB2533623 to be installed on Windows 7 and Windows Server 2008 R2 in order to run.");

+ }

+ VirtualLock (&CmdTokenPin, sizeof (CmdTokenPin));

+ InitGlobalLocks ();

+ InitCommonControls();

+ GetModuleFileNameW (NULL, modPath, ARRAYSIZE (modPath));

+ AbortProcessDirect (L"This distribution package is damaged. Please try downloading it again (preferably from the official VeraCrypt website at https://www.veracrypt.fr).");

+ /* enable drag-n-drop when we are running elevated */

+ AllowMessageInUIPI (WM_DROPFILES);

+ AllowMessageInUIPI (WM_COPYDATA);

+ AllowMessageInUIPI (WM_COPYGLOBALDATA);

+ SetCurrentProcessExplicitAppUserModelID (TC_APPLICATION_ID);

+ // in TESTSIGNING mode, we support only Windows 7 and Windows 8/8.1

+ if ( !IsOSVersionAtLeast(WIN_7, 0)

+ if (IsOSAtLeast(WIN_7))

+ if (S_OK == UrlUnescapeW (pageFileName, pageFileName, &cchUnescaped, URL_UNESCAPE_INPLACE))

+ HINF hInf = SetupOpenInfFileW (infFileName.c_str(), NULL, INF_STYLE_OLDNT | INF_STYLE_WIN4, NULL);

+ finally_do_arg (HINF, hInf, { SetupCloseInfFile (finally_arg); });

+ throw_sys_if (!SetupInstallFromInfSectionW (ParentWindow, hInf, L"veracrypt", SPINST_REGISTRY, regKey, NULL, 0, NULL, NULL, NULL, NULL));

+ return SetupDiOpenClassRegKey (deviceClassGuid, KEY_READ | KEY_WRITE);

+ return SHDeleteKeyW(hKey, keyName);

+ return ImageList_Create(cx, cy, flags, cInitial, cGrow);

+ return ImageList_Add(himl, hbmImage, hbmMask);

+ return SHStrDupW (psz, ppwsz);

+ /* ChangeWindowMessageFilter is used to enable some messages bypasss UIPI (User Interface Privilege Isolation) */

+ ChangeWindowMessageFilter (msg, MSGFLT_ADD);

+ wchar_t* pszUsersPath = NULL;

+ if (S_OK == SHGetKnownFolderPath (FOLDERID_UserProfiles, 0, NULL, &pszUsersPath))

+ StringCchPrintfW (path, cchSize, L"%s\\Default\\AppData\\Local\\Microsoft\\Windows\\WSUS\\", pszUsersPath);

+ CoTaskMemFree (pszUsersPath);

+ bResult = TRUE;

+ wchar_t szSys32Path[MAX_PATH];

+ if (!GetSystemDirectory (szSys32Path, ARRAYSIZE (szSys32Path)))

+ {

+ StringCchCopy(szSys32Path, ARRAYSIZE (szSys32Path), L"C:\\Windows\\System32");

+ }

+ StringCchPrintfW (path, cchSize, L"%c:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WSUS\\", szSys32Path[0]);

+ ret = CreateProcessWithTokenW(

+ hr = IUnknown_QueryService(pdisp, SID_STopLevelBrowser, IID_PPV_ARGS(&psb));

+ wchar_t szDllPath[MAX_PATH] = { 0 };

+ HMODULE hPropsys = NULL;

+ StringCchCatW(szDllPath, MAX_PATH, L"\\Propsys.dll");

+ StringCchCopyW(szDllPath, MAX_PATH, L"C:\\Windows\\System32\\Propsys.dll");

+ hPropsys = LoadLibrary(szDllPath);

+ if (hPropsys)

+ PSGetPropertyKeyFromNameFn PSGetPropertyKeyFromNamePtr = (PSGetPropertyKeyFromNameFn)GetProcAddress(hPropsys, "PSGetPropertyKeyFromName");

+ if (PSGetPropertyKeyFromNamePtr)

+ WCHAR parsingName[3] = {driveLetter, L':', 0};

+ IShellItem2* drive = NULL;

+ hr = SHCreateItemFromParsingName(parsingName, NULL, IID_PPV_ARGS(&drive));

+ if (SUCCEEDED(hr)) {

+ PROPERTYKEY pKey;

+ hr = PSGetPropertyKeyFromNamePtr(L"System.Volume.BitLockerProtection", &pKey);

+ if (SUCCEEDED(hr)) {

+ PROPVARIANT prop;

+ PropVariantInit(&prop);

+ hr = drive->GetProperty(pKey, &prop);

+ int status = prop.intVal;

+ if (status == BL_State_FullyEncrypted || status == BL_State_DecryptionInProgress || status == BL_State_DecryptionSuspended)

+ blStatus = BL_Status_Protected;

+ else

+ blStatus = BL_Status_Unprotected;

+ if (drive)

+ drive->Release();

+ FreeLibrary(hPropsys);

+