}

else

{

return FALSE;

}

}

{

if (remove (GetConfigPath (TC_APPD_FILENAME_SYSTEM_ENCRYPTION)) != 0)

{

return FALSE;

}

f = fopen (GetConfigPath (TC_APPD_FILENAME_SYSTEM_ENCRYPTION), "w");

if (f == NULL)

{

handleWin32Error (hwndDlg);

return FALSE;

}

{

handleWin32Error (hwndDlg);

fclose (f);

return FALSE;

}

{

if (!CreateSysEncMutex ())

{

return FALSE;

}

{

if (!CreateSysEncMutex ())

{

return FALSE; // Only one instance that has the mutex can modify the system encryption settings

}

{

if (!CreateSysEncMutex ())

{

return FALSE;

}

}

ConfigReadString ("SecurityTokenLibrary", "", SecurityTokenLibraryPath, sizeof (SecurityTokenLibraryPath) - 1);

if (SecurityTokenLibraryPath[0])

if (hwndDlg != NULL)

{

if (GetPreferredLangId () != NULL)

ConfigWriteString ("Language", GetPreferredLangId ());

NormalCursor ();

}

catch (Exception &e)

{

e.Show (MainDlg);

NormalCursor ();

return FALSE;

}

// From now on, we should be the only instance of the TC wizard allowed to deal with system encryption

if (!CreateSysEncMutex ())

{

NormalCursor ();

return FALSE;

}

// User-mode app may have crashed and its mutex may have gotten lost, so we need to check the driver status too

if (BootEncStatus.SetupInProgress)

{

{

if (SystemEncryptionStatus != SYSENC_STATUS_ENCRYPTING

&& SystemEncryptionStatus != SYSENC_STATUS_DECRYPTING)

else

{

CloseSysEncMutex ();

NormalCursor ();

return FALSE;

}

{

if (!SysDriveOrPartitionFullyEncrypted (FALSE)

{

if (SystemEncryptionStatus == SYSENC_STATUS_NONE)

{

else

{

CloseSysEncMutex ();

NormalCursor ();

return FALSE;

}

{

if (!IsUacSupported())

{

}

}

{

if (BootEncObj->SystemDriveContainsNonStandardPartitions())

{

bWholeSysDrive = FALSE;

}

{

bWholeSysDrive = FALSE;

{

ChangeWizardMode (WIZARD_MODE_NONSYS_DEVICE);

return FALSE;

}

}

else

}

}

else if (BootEncObj->SystemPartitionCoversWholeDrive()

&& !bWholeSysDrive)

}

}

// In addition, he selected the hidden volume mode.

if (bWholeSysDrive)

bWholeSysDrive = FALSE;

catch (Exception &e)

{

e.Show (MainDlg);

return FALSE;

}

"IDCANCEL",

0};

{

case 1:

return ChangeSystemEncryptionStatus (SYSENC_STATUS_ENCRYPTING);

}

else

{

return FALSE;

}

}

catch (Exception &e)

{

e.Show (MainDlg);

EnableWindow (GetDlgItem (hCurPage, IDC_PAUSE), TRUE);

return;

}

{

SetTimer (MainDlg, TIMER_ID_SYSENC_PROGRESS, TIMER_INTERVAL_SYSENC_PROGRESS, NULL);

EnableWindow (GetDlgItem (hCurPage, IDC_PAUSE), TRUE);

return;

}

EnableWindow (GetDlgItem (hCurPage, IDC_PAUSE), TRUE);

}

else

}

catch (Exception &e)

{

e.Show (MainDlg);

EnableWindow (GetDlgItem (hCurPage, IDC_PAUSE), TRUE);

return;

}

SetThreadExecutionState (ES_CONTINUOUS);

EnableWindow (GetDlgItem (hCurPage, IDC_PAUSE), TRUE);

return;

}

SetTimer (MainDlg, TIMER_ID_SYSENC_PROGRESS, TIMER_INTERVAL_SYSENC_PROGRESS, NULL);

}

else

}

}

{

unsigned char tmp[4];

unsigned char tmpByte;

return;

}

if (memcmp (lastRandPool, randPool, sizeof(lastRandPool)) != 0)

{

{

SetTimer (MainDlg, TIMER_ID_WIPE_PROGRESS, TIMER_INTERVAL_WIPE_PROGRESS, NULL);

EnableWindow (GetDlgItem (hCurPage, IDC_ABORT_BUTTON), TRUE);

return;

}

}

if (!bDeviceWipeInProgress)

{

EnableWindow (GetDlgItem (hCurPage, IDC_ABORT_BUTTON), TRUE);

return;

}

}

if (bInPlaceEncNonSysResumed)

{

SetNonSysInplaceEncUIStatus (NONSYS_INPLACE_ENC_STATUS_PAUSED);

}

else

{

SetNonSysInplaceEncUIStatus (NONSYS_INPLACE_ENC_STATUS_ERROR);

}

}

else if (!(bHiddenVolHost && hiddenVolHostDriveNo < 0)) // If the error was not that the hidden volume host could not be mounted (this error has already been reported to the user)

bHiddenVolFinished = TRUE;

if (!bHiddenOS)

}

else if (bInPlaceEncNonSys)

{

HandleOldAssignedDriveLetter ();

}

else

{

if (bSparseFileSwitch && quickFormat)

}

}

else

CheckCapsLock (hwndDlg, FALSE);

if (CreatingHiddenSysVol())

break;

case CIPHER_PAGE:

if (CreatingHiddenSysVol())

break;

}

|| sectorSize > TC_MAX_VOLUME_SECTOR_SIZE

|| sectorSize % ENCRYPTION_DATA_UNIT_SIZE != 0)

{

return FALSE;

}

StringCbCatW (tmpMcMsg, sizeof(tmpMcMsg), deviceName);

wchar_t *tmpStr[] = {L"", tmpMcMsg, tmpMcOption1, tmpMcOptionCancel, 0};

{

case 1:

// Proceed

// Ask the user if he wants to try again (to prevent repeated system freezing, etc.)

char *tmpStr[] = {0, "HIDDEN_SECTOR_DETECTION_FAILED_PREVIOUSLY", "SKIP_HIDDEN_SECTOR_DETECTION", "RETRY_HIDDEN_SECTOR_DETECTION", "IDC_EXIT", 0};

{

case 1:

// Do not try again

WaitCursor();

{

bInPlaceEncNonSys = (FileSystemAppearsEmpty (szDiskFile) == 0);

}

if (keybLayout != 0x00000409 && keybLayout != 0x04090409)

{

EndMainDlg (MainDlg);

return 1;

}

if (SetTimer (MainDlg, TIMER_ID_KEYB_LAYOUT_GUARD, TIMER_INTERVAL_KEYB_LAYOUT_GUARD, NULL) == 0)

{

EndMainDlg (MainDlg);

return 1;

}

SendMessage (GetDlgItem (hwndDlg, IDC_DISPLAY_POOL_CONTENTS), BM_SETCHECK, showKeys ? BST_CHECKED : BST_UNCHECKED, 0);

break;

catch (Exception &e)

{

e.Show (hwndDlg);

EndMainDlg (MainDlg);

return 0;

}

}

else

{

EndMainDlg (MainDlg);

return 0;

}

{

if (SysEncInEffect())

{

return 1;

}

{

hash_algo = DEFAULT_HASH_ALGORITHM_BOOT;

RandSetHashFunction (DEFAULT_HASH_ALGORITHM_BOOT);

SelectAlgo (GetDlgItem (hwndDlg, IDC_COMBO_BOX_HASH_ALGO), &hash_algo);

}

}

{

if (bSparseFileSwitch)

{

SetCheckBox (hwndDlg, IDC_QUICKFORMAT, FALSE);

}

else

{

SetCheckBox (hwndDlg, IDC_QUICKFORMAT, FALSE);

}

return 1;

&& (nCurPageNo == SYSENC_COLLECTING_RANDOM_DATA_PAGE || nCurPageNo == NONSYS_INPLACE_ENC_RAND_DATA_PAGE))

{

showKeys = IsButtonChecked (GetDlgItem (hCurPage, IDC_DISPLAY_POOL_CONTENTS));

return 1;

}

{

case IDC_ABORT_BUTTON:

WipeAbort();

return 1;

catch (Exception &e)

{

e.Show (hwndDlg);

EndMainDlg (MainDlg);

return 0;

}

if (WizardMode == WIZARD_MODE_SYS_DEVICE

|| bInPlaceEncNonSys)

{

}

else

{

if (!showKeys)

return 1;

tmp2[0] = 0;

}

e.Show (hwndDlg);

EndMainDlg (MainDlg);

return 1;

}

&& SystemEncryptionStatus == SYSENC_STATUS_ENCRYPTING

&& (IsDiskReadError (e.ErrorCode)))

{

if (bTryToCorrectReadErrors)

{

&& SystemEncryptionStatus == SYSENC_STATUS_DECRYPTING

&& (IsDiskReadError (e.ErrorCode)))

{

if (DiscardUnreadableEncryptedSectors)

{

ChangeSystemEncryptionStatus (SYSENC_STATUS_NONE);

return 1;

}

break;

EnableWindow (GetDlgItem (hwndDlg, IDCANCEL), FALSE);

EnableWindow (GetDlgItem (hCurPage, IDC_PAUSE), FALSE);

// Reboot is required to enable uninstallation and hibernation

{

EndMainDlg (MainDlg);

if (keybLayout != 0x00000409 && keybLayout != 0x04090409)

{

KillTimer (hwndDlg, TIMER_ID_KEYB_LAYOUT_GUARD);

EndMainDlg (MainDlg);

return 1;

}

Sleep (1500); // User-friendly GUI

if (bSysEncDriveAnalysisTimeOutOccurred)

LoadPage (hwndDlg, SYSENC_DRIVE_ANALYSIS_PAGE + 1);

}

EnableWindow (GetDlgItem (MainDlg, IDC_NEXT), FALSE);

EnableWindow (GetDlgItem (hCurPage, IDC_ABORT_BUTTON), FALSE);

TextInfoDialogBox (TC_TBXID_DECOY_OS_INSTRUCTIONS);

if (BootEncObj->GetSystemDriveConfiguration().ExtraBootPartitionPresent)

return 1;

}

&& (bVolTransformThreadRunning || bVolTransformThreadToRun || bInPlaceEncNonSysResumed))

{

// Non-system encryption in progress

{

NonSysInplaceEncPause ();

else if (bVolTransformThreadRunning || bVolTransformThreadToRun)

{

// Format (non-in-place encryption) in progress

{

bVolTransformThreadCancel = TRUE;

// System encryption/decryption in progress

if (AskYesNo (SystemEncryptionStatus == SYSENC_STATUS_DECRYPTING ?

{

if (nCurPageNo == SYSENC_PRETEST_RESULT_PAGE)

TextInfoDialogBox (TC_TBXID_SYS_ENC_RESCUE_DISK);

}

else

{

return 1; // Disallow close

}

}

}

else if (bConfirmQuitSysEncPretest)

{

return 1; // Disallow close

}

else if (bConfirmQuit)

{

return 1; // Disallow close

}

static bool warningConfirmed = false;

if (!warningConfirmed)

{

exit (0);

warningConfirmed = true;

BootEncObj->CheckRequirementsHiddenOS ();

if (CheckGapBetweenSysAndHiddenOS ())

}

catch (Exception &e)

{

return 1;

}

{

NormalCursor ();

return 1;

WarningDirect ((wstring (GetString ("HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO"))

+ L"\n\n"

if (!IsAdmin() && IsUacSupported())

{

{

if (BootEncObj->SystemDriveContainsNonStandardPartitions())

{

bWholeSysDrive = FALSE;

}

{

if (BootEncObj->SystemDriveContainsExtendedPartition())

{

return 1;

bWholeSysDrive = FALSE;

}

else

}

}

if (!bWholeSysDrive && BootEncObj->SystemPartitionCoversWholeDrive())

}

catch (Exception &e)

{

{

// Multi-boot

return 1;

if (bHiddenOS)

{

{

return 1;

}

}

{

if (IsOSAtLeast (WIN_7)

&& BootEncObj->GetSystemDriveConfiguration().ExtraBootPartitionPresent

{

TextInfoDialogBox (TC_TBXID_EXTRA_BOOT_PARTITION_REMOVAL_INSTRUCTIONS);

NormalCursor ();

return 1;

}

{

NormalCursor ();

return 1;

if (!SysEncMultiBootCfg.SystemOnBootDrive)

{

EndMainDlg (MainDlg);

return 1;

}

{

// Whole-system-drive encryption is currently not supported if the drive contains

// more than one system

return 1;

}

{

// Whole-system-drive encryption is currently not supported if the drive contains

// more than one system

return 1;

}

}

if (SysEncMultiBootCfg.BootLoaderBrand)

{

// A non-Windows boot manager in the MBR

EndMainDlg (MainDlg);

return 1;

}

+ GetString ("NOTE_BEGINNING")

+ GetString ("HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO")

+ L" "

NormalCursor ();

return 1;

}

if (bDevice)

{

// Not a valid device path

NormalCursor ();

return 1;

}

else

{

{

NormalCursor ();

return 1;

if (IsMountedVolume (szDiskFile))

{

NormalCursor ();

return 1;

}

case 1:

case 2:

case 3:

{

NormalCursor ();

return 1;

else

{

if (CheckFileExtension(szFileName)

{

NormalCursor ();

return 1;

else if (IsSparseFile (hwndDlg))

{

// Hidden volumes must not be created within sparse file containers

NormalCursor ();

return 1;

}

{

// Check requirements for non-system in-place encryption

{

return 1;

}

return 1;

}

return 1;

}

nNewPageNo = CIPHER_PAGE - 1;

if (SysEncInEffect ()

&& EAGetCipherCount (nVolumeEA) > 1) // Cascade?

{

return 1;

if (!bHiddenOS)

}

nIndex = SendMessage (GetDlgItem (hCurPage, IDC_COMBO_BOX_HASH_ALGO), CB_GETCURSEL, 0, 0);

// The host file system is FAT32

if (nUIVolumeSize * nMultiplier >= 4 * BYTES_PER_GB)

{

return 1;

}

}

if (!IsOSAtLeast (WIN_VISTA)

&& nUIVolumeSize * nMultiplier > 2 * BYTES_PER_TB)

{

}

}

if (((double) nUIVolumeSize / (nMaximumHiddenVolSize / nMultiplier)) > 0.85) // 85%

{

return 1;

}

}

// Password character encoding

if (!CheckPasswordCharEncoding (GetDlgItem (hCurPage, IDC_PASSWORD), NULL))

{

return 1;

}

// Check password length (do not check if it's for an outer volume).

{

WaitCursor ();

{

NormalCursor ();

return 1;

{

// Restore the original keyboard layout

if (LoadKeyboardLayout (OrigKeyboardLayout, KLF_ACTIVATE | KLF_SUBSTITUTE_OK) == NULL)

else

bKeyboardLayoutChanged = FALSE;

}

if (KeyFilesEnable)

{

}

if (!bInPlaceEncNonSys)

if (DeferredNonSysInPlaceEncDevices.empty())

{

NormalCursor();

return 1;

+ GetString ("NOTE_BEGINNING")

+ GetString ("HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO")

+ L" "

return 1;

}

"CD_BURNER_NOT_PRESENT_CONNECTED_NOW",

0 };

{

case 1:

wchar_t msg[8192];

swprintf_s (msg, array_capacity (msg), GetString ("CD_BURNER_NOT_PRESENT_WILL_STORE_ISO_INFO"), SingleStringToWide (szRescueDiskISO).c_str());

bDontVerifyRescueDisk = TRUE;

nNewPageNo = SYSENC_RESCUE_DISK_VERIFIED_PAGE;

break;

}

if (IsWindowsIsoBurnerAvailable() && !bDontVerifyRescueDisk)

NormalCursor ();

}

StringCbPrintfW (szTmp, sizeof(szTmp), GetString ("RESCUE_DISK_CHECK_FAILED"),

IsWindowsIsoBurnerAvailable () ? L"" : GetString ("RESCUE_DISK_CHECK_FAILED_SENTENCE_APPENDIX"));

NormalCursor ();

#ifndef _DEBUG

}

else

{

nNewPageNo = SYSENC_RESCUE_DISK_VERIFIED_PAGE; // Skip irrelevant pages

}

}

|| nCurPageNo == NONSYS_INPLACE_ENC_WIPE_MODE_PAGE)

{

if (nWipeMode > 0

return 1;

}

else if (nCurPageNo == SYSENC_PRETEST_INFO_PAGE)

{

if (LocalizationActive

return 1;

bConfirmQuitSysEncPretest = TRUE;

if (!bHiddenOS) // This text is not tailored to hidden OS

TextInfoDialogBox (TC_TBXID_SYS_ENCRYPTION_PRETEST);

return 1;

/* Install the pre-boot authentication component and initiate the system encryption pretest.

catch (Exception &e)

{

e.Show (hwndDlg);

NormalCursor ();

return 1;

}

|| !ChangeHiddenOSCreationPhase (TC_HIDDEN_OS_CREATION_PHASE_CLONING))

{

ChangeSystemEncryptionStatus (SYSENC_STATUS_NONE);

NormalCursor ();

return 1;

}

}

else if (!ChangeSystemEncryptionStatus (SYSENC_STATUS_PRETEST))

{

NormalCursor ();

return 1;

}

+ GetString ("NOTE_BEGINNING")

+ GetString ("HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO")

+ L" "

if (GetVolumeDataAreaSize (FALSE, nVolumeSize) <= TC_MAX_FAT_SECTOR_COUNT * GetFormatSectorSize()

{

fileSystem = FILESYS_FAT;

SelectAlgo (GetDlgItem (hCurPage, IDC_FILESYS), (int *) &fileSystem);

else

{

if (GetVolumeDataAreaSize (FALSE, nVolumeSize) > TC_MAX_FAT_SECTOR_COUNT * GetFormatSectorSize())

bVolTransformThreadToRun = FALSE;

return 1;

if (bHiddenOS

&& (double) nVolumeSize / GetSystemPartitionSize() < MIN_HIDDENOS_DECOY_PARTITION_SIZE_RATIO_NTFS)

{

if (GetVolumeDataAreaSize (FALSE, nVolumeSize) <= TC_MAX_FAT_SECTOR_COUNT * GetFormatSectorSize()

{

fileSystem = FILESYS_FAT;

SelectAlgo (GetDlgItem (hCurPage, IDC_FILESYS), (int *) &fileSystem);

else

{

if (GetVolumeDataAreaSize (FALSE, nVolumeSize) > TC_MAX_FAT_SECTOR_COUNT * GetFormatSectorSize())

bVolTransformThreadToRun = FALSE;

return 1;

{

if (nCurrentOS == WIN_2000)

{

bVolTransformThreadToRun = FALSE;

return 1;

}

else if (GetVolumeDataAreaSize (FALSE, nVolumeSize) <= TC_MAX_FAT_SECTOR_COUNT * GetFormatSectorSize()

{

bVolTransformThreadToRun = FALSE;

return 1;

if (fileSystem == FILESYS_FAT

&& nNeedToStoreFilesOver4GB == 1

{

bVolTransformThreadToRun = FALSE;

return 1;

else if (nCurPageNo == DEVICE_WIPE_PAGE)

{

{

WipeStart ();

ArrowWaitCursor();

{

// Restore the original keyboard layout

if (LoadKeyboardLayout (OrigKeyboardLayout, KLF_ACTIVATE | KLF_SUBSTITUTE_OK) == NULL)

else

bKeyboardLayoutChanged = FALSE;

}

}

else

{

exit(0);

}

}

else

{

exit(0);

}

break;

}

else

{

exit(0);

}

}

else

{

exit(0);

}

}

else

{

exit(0);

}

break;

}

else

{

exit(0);

}

break;

case OptionTokenLib:

if (GetArgumentValue (lpszCommandLineArgs, nArgPos, &i, nNoCommandLineArgs, SecurityTokenLibraryPath, sizeof (SecurityTokenLibraryPath)) == HAS_ARGUMENT)

else

break;

if (!DeviceIoControl (hDriver, TC_IOCTL_GET_VOLUME_PROPERTIES, &volProp, sizeof (volProp), &volProp, sizeof (volProp), &dwResult, NULL) || dwResult == 0)

{

handleWin32Error (hwndDlg);

goto efsf_error;

}

if (volProp.volFormatVersion < TC_VOLUME_FORMAT_VERSION)

{

// We do not support creating hidden volumes within volumes created by TrueCrypt 5.1a or earlier.

return 0;

}

if (volProp.hiddenVolume)

{

// The user entered a password for a hidden volume

return 0;

}

if (volProp.volumeHeaderFlags & TC_HEADER_FLAG_NONSYS_INPLACE_ENC

|| volProp.volumeHeaderFlags & TC_HEADER_FLAG_ENCRYPTED_SYSTEM)

{

return 0;

}

if (nCurrentOS == WIN_2000)

{

return 0;

}

if (bHiddenVolDirect && GetVolumeDataAreaSize (FALSE, hiddenVolHostSize) <= TC_MAX_FAT_SECTOR_COUNT * GetFormatSectorSize())

if (!GetDiskFreeSpace(szRootPathName,

&dwSectorsPerCluster,

&dwTotalNumberOfClusters))

{

handleWin32Error (hwndDlg);

return -1;

};

{

// Unsupported file system

return 0;

}

WipeHiddenOSCreationConfig(); // For extra conservative security

ChangeSystemEncryptionStatus (SYSENC_STATUS_NONE);

EndMainDlg (MainDlg);

return;

}

{

if (IsHiddenOSRunning())

{

AbortProcessSilent();

}

// system partition and then pressed Esc in the boot loader screen. 3) Corrupted or stale config

// file. 4) Damaged system.

EndMainDlg (MainDlg);

return;

}

case SYSENC_COMMAND_STARTUP_SEQ_RESUME:

if (bDirectSysEncModeCommand == SYSENC_COMMAND_STARTUP_SEQ_RESUME

{

EndMainDlg (MainDlg);

return;

else

{

// Nothing to resume

EndMainDlg (MainDlg);

return;

if (SysDriveOrPartitionFullyEncrypted (FALSE))

{

EndMainDlg (MainDlg);

return;

}

if (CreateSysEncMutex ()) // If no other instance is currently taking care of system encryption

{

{

bDirectSysEncMode = TRUE;

ChangeWizardMode (WIZARD_MODE_SYS_DEVICE);

catch (Exception &e)

{

e.Show (hwndDlg);

EndMainDlg (MainDlg);

return;

}

{

// Pretest failed (no hidden operating system involved)

{

// User wants to retry the pretest

bAnswerTerminate = FALSE;

"HIDDEN_OS_CREATION_NOT_FINISHED_CHOICE_ASK_LATER",

0};

{

case 1:

// User wants to restart and continue/retry

e.Show (NULL);

}

{

EndMainDlg (MainDlg);

if (NonSysInplaceEncInProgressElsewhere ())

AbortProcessSilent ();

SwitchWizardToNonSysInplaceEncResumeMode();

else

AbortProcessSilent ();

}

else if (bInPlaceEncNonSysPending

&& !NonSysInplaceEncInProgressElsewhere ()

{

SwitchWizardToNonSysInplaceEncResumeMode();

return;