<entry lang="en" key="SECURITY_TOKEN_ERROR">Security token error</entry>

<entry lang="en" key="CKR_PIN_INCORRECT">Password for security token is incorrect.</entry>

<entry lang="en" key="CKR_DEVICE_MEMORY">The security token does not have enough memory/space to perform the requested operation.\n\nIf you are attempting to import a keyfile, you should select a smaller file or use a keyfile generated by VeraCrypt (select 'Tools' > 'Keyfile Generator').</entry>

<entry lang="en" key="ALL_TOKEN_SESSIONS_CLOSED">All open security token sessions have been closed.</entry>

<entry lang="en" key="SELECT_TOKEN_KEYFILES">Select Security Token Keyfiles</entry>

<entry lang="en" key="TOKEN_SLOT_ID">Slot</entry>

<entry lang="en" key="TOKEN_NAME">Token name</entry>

<entry lang="en" key="TOKEN_DATA_OBJECT_LABEL">File name</entry>

<entry lang="en" key="BOOT_PASSWORD_CACHE_KEYBOARD_WARNING">IMPORTANT: Please note that pre-boot authentication passwords are always typed using the standard US keyboard layout. Therefore, a volume that uses a password typed using any other keyboard layout may be impossible to mount using a pre-boot authentication password (note that this is not a bug in VeraCrypt). To allow such a volume to be mounted using a pre-boot authentication password, follow these steps:\n\n1) Click 'Select File' or 'Select Device' and select the volume.\n2) Select 'Volumes' > 'Change Volume Password'.\n3) Enter the current password for the volume.\n4) Change the keyboard layout to English (US) by clicking the Language bar icon in the Windows taskbar and selecting 'EN English (United States)'.\n5) In VeraCrypt, in the field for the new password, type the pre-boot authentication password.\n6) Confirm the new password by retyping it in the confirmation field and click 'OK'.\nWARNING: Please keep in mind that if you follow these steps, the volume password will always have to be typed using the US keyboard layout (which is automatically ensured only in the pre-boot environment).</entry>

<entry lang="en" key="SYS_FAVORITES_KEYBOARD_WARNING">System favorite volumes will be mounted using the pre-boot authentication password. If any system favorite volume uses a different password, it will not be mounted.</entry>

<entry lang="en" key="SYS_FAVORITES_ADMIN_ONLY_INFO">Please note that if you need to prevent normal VeraCrypt volume actions (such as 'Dismount All', auto-dismount, etc.) from affecting system favorite volumes, you should enable the option 'Allow only administrators to view and dismount system favorite volumes in VeraCrypt'. In addition, when VeraCrypt is run without administrator privileges (the default on Windows Vista and later), system favorite volumes will not be displayed in the drive letter list in the main VeraCrypt application window.</entry>

<entry lang="en" key="SYS_FAVORITES_ADMIN_ONLY_WARNING">IMPORTANT: Please keep in mind that if this option is enabled and VeraCrypt does not have administrator privileges, mounted system favorite volumes are NOT displayed in the VeraCrypt application window and they cannot be dismounted. Therefore, if you need e.g. to dismount a system favorite volume, please right-click the VeraCrypt icon (in the Start menu) and select 'Run as administrator' first. The same limitation applies to the 'Dismount All' function, 'Auto-Dismount' functions, 'Dismount All' hot keys, etc.</entry>

<entry lang="en" key="SETTING_REQUIRES_REBOOT">Note that this setting takes effect only after the operating system is restarted.</entry>

<entry lang="en" key="COMMAND_LINE_ERROR">Error while parsing command line.</entry>

<entry lang="en" key="RESCUE_DISK">Rescue Disk</entry>

<entry lang="en" key="SELECT_FILE_AND_MOUNT">Select &amp;File and Mount...</entry>

<entry lang="en" key="SELECT_DEVICE_AND_MOUNT">Select &amp;Device and Mount...</entry>

<entry lang="en" key="DISABLE_NONADMIN_SYS_FAVORITES_ACCESS">Allow only administrators to view and dismount system favorite volumes in VeraCrypt</entry>

<entry lang="en" key="MOUNT_SYSTEM_FAVORITES_ON_BOOT">Mount system favorite volumes when Windows starts (in the initial phase of the startup procedure)</entry>

<entry lang="en" key="MOUNTED_VOLUME_DIRTY">Warning: The filesystem on the volume mounted as '%s' was not cleanly dismounted and thus may contain errors. Using a corrupted filesystem can cause data loss or data corruption.\n\nNote: Before you physically remove or switch off a device (such as a USB flash drive or an external hard drive) where a mounted VeraCrypt volume resides, you should always dismount the VeraCrypt volume in VeraCrypt first.\n\n\nDo you want Windows to attempt to detect and fix errors (if any) on the filesystem?</entry>

<entry lang="en" key="SYS_FAVORITE_VOLUME_DIRTY">Warning: One or more system favorite volumes were not cleanly dismounted and thus may contain filesystem errors. Please see the system event log for further details.\n\nUsing a corrupted filesystem can cause data loss or data corruption. You should check the affected system favorite volume(s) for errors (right-click each of them in VeraCrypt and select 'Repair Filesystem').</entry>

<entry lang="en" key="FILESYS_REPAIR_CONFIRM_BACKUP">Warning: Repairing a damaged filesystem using the Microsoft 'chkdsk' tool might cause loss of files in damaged areas. Therefore, it is recommended that you first back up the files stored on the VeraCrypt volume to another, healthy, VeraCrypt volume.\n\nDo you want to repair the filesystem now?</entry>

<entry lang="en" key="MOUNTED_CONTAINER_FORCED_READ_ONLY">Volume '%s' has been mounted as read-only because write access was denied.\n\nPlease make sure the security permissions of the file container allow you to write to it (right-click the container and select Properties > Security).\n\nNote that, due to a Windows issue, you may see this warning even after setting the appropriate security permissions. This is not caused by a bug in VeraCrypt. A possible solution is to move your container to, e.g., your 'Documents' folder.\n\nIf you intend to keep your volume read-only, set the read-only attribute of the container (right-click the container and select Properties > Read-only), which will suppress this warning.</entry>

<entry lang="en" key="MOUNTED_DEVICE_FORCED_READ_ONLY">Volume '%s' had to be mounted as read-only because write access was denied.\n\nPlease make sure no other application (e.g. antivirus software) is accessing the partition/device on which the volume is hosted.</entry>

<entry lang="en" key="MOUNTED_DEVICE_FORCED_READ_ONLY_WRITE_PROTECTION">Volume '%s' has been mounted as read-only because the operating system reported the host device to be write-protected.\n\nPlease note that some custom chipset drivers have been reported to cause writable media to falsely appear write-protected. This problem is not caused by VeraCrypt. It may be solved by updating or uninstalling any custom (non-Microsoft) chipset drivers that are currently installed on this system.</entry>

<entry lang="en" key="LIMIT_ENC_THREAD_POOL_NOTE">Note that the Hyper-Threading technology provides multiple logical cores per a single physical core. When Hyper Threading is enabled, the number selected above represents the number of logical processors/cores.</entry>

<entry lang="en" key="NUMBER_OF_THREADS">%d threads</entry>

<entry lang="en" key="DISABLED_HW_AES_AFFECTS_PERFORMANCE">Note that hardware-accelerated AES is disabled, which will affect benchmark results (worse performance).\n\nTo enable hardware acceleration, select 'Settings' > 'Performance' and enable the corresponding option.</entry>

<entry lang="en" key="LIMITED_THREAD_COUNT_AFFECTS_PERFORMANCE">Note that the number of threads is currently limited, which will affect benchmark results (worse performance).\n\nTo utilize the full potential of the processor(s), select 'Settings' > 'Performance' and disable the corresponding option.</entry>

<entry lang="en" key="ASK_REMOVE_DEVICE_WRITE_PROTECTION">Do you want VeraCrypt to attempt to disable write protection of the partition/drive?</entry>

<entry lang="en" key="CONFIRM_SETTING_DEGRADES_PERFORMANCE">WARNING: This setting may degrade performance.\n\nAre you sure you want to use this setting?</entry>

<entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN_TITLE">Warning: VeraCrypt volume auto-dismounted</entry>

<entry lang="en" key="HOST_DEVICE_REMOVAL_DISMOUNT_WARN">Before you physically remove or turn off a device containing a mounted volume, you should always dismount the volume in VeraCrypt first.\n\nUnexpected spontaneous dismount is usually caused by an intermittently failing cable, drive (enclosure), etc.</entry>

<entry lang="en" key="UNSUPPORTED_TRUECRYPT_FORMAT">This volume was created with TrueCrypt %x.%x but VeraCrypt supports only TrueCrypt volumes created with TrueCrypt 6.x/7.x series</entry>

<entry lang="en" key="KEYFILE">Keyfile</entry>

<entry lang="en" key="VKEY_08">Backspace</entry>

<entry lang="en" key="VKEY_09">Tab</entry>

<entry lang="en" key="VKEY_0C">Clear</entry>

<entry lang="en" key="VKEY_0D">Enter</entry>

<entry lang="en" key="VKEY_13">Pause</entry>

<entry lang="en" key="VKEY_14">Caps Lock</entry>

<entry lang="en" key="VKEY_20">Spacebar</entry>

<entry lang="en" key="VKEY_21">Page Up</entry>

<entry lang="en" key="VKEY_22">Page Down</entry>

<entry lang="en" key="VKEY_23">End</entry>

<entry lang="en" key="VKEY_24">Home</entry>

<entry lang="en" key="VKEY_25">Left Arrow</entry>

<entry lang="en" key="VKEY_26">Up Arrow</entry>

<entry lang="en" key="VKEY_27">Right Arrow</entry>

<entry lang="en" key="VKEY_28">Down Arrow</entry>

<entry lang="en" key="VKEY_29">Select Key</entry>

<entry lang="en" key="VKEY_2A">Print Key</entry>

<entry lang="en" key="VKEY_2B">Execute Key</entry>

<entry lang="en" key="VKEY_2C">Print Screen</entry>

<entry lang="en" key="VKEY_2D">Insert</entry>

<entry lang="en" key="VKEY_2E">Delete</entry>

<entry lang="en" key="VKEY_5D">Applications Key</entry>

<entry lang="en" key="VKEY_5F">Sleep</entry>

<entry lang="en" key="VKEY_90">Num Lock</entry>

<entry lang="en" key="VKEY_91">Scroll Lock</entry>

<entry lang="en" key="VKEY_A6">Browser Back</entry>

<entry lang="en" key="VKEY_A7">Browser Forward</entry>

<entry lang="en" key="VKEY_A8">Browser Refresh</entry>

<entry lang="en" key="VKEY_A9">Browser Stop</entry>

<entry lang="en" key="VKEY_AA">Browser Search</entry>

<entry lang="en" key="VKEY_AB">Browser Favorites</entry>

<entry lang="en" key="VKEY_AC">Browser Home</entry>

<entry lang="en" key="VKEY_AD">Mute</entry>

<entry lang="en" key="VKEY_AE">Volume Down</entry>

<entry lang="en" key="GB">GiB</entry>

<entry lang="en" key="TB">TiB</entry>

<entry lang="en" key="PB">PiB</entry>

<entry lang="en" key="B_PER_SEC">B/s</entry>

<entry lang="en" key="KB_PER_SEC">KiB/s</entry>

<entry lang="en" key="MB_PER_SEC">MiB/s</entry>

<entry lang="en" key="GB_PER_SEC">GiB/s</entry>

<entry lang="en" key="TB_PER_SEC">TiB/s</entry>

<entry lang="en" key="PB_PER_SEC">PiB/s</entry>

<entry lang="en" key="TRIPLE_DOT_GLYPH_ELLIPSIS">…</entry>

<entry lang="en" key="IDC_BOOT_LOADER_CACHE_PIM">Include &amp;PIM when caching pre-boot authentication password</entry>

<entry lang="en" key="IDC_PREF_CACHE_PIM">Include PIM when caching a password</entry>

<entry lang="en" key="IDC_SHOW_DISCONNECTED_NETWORK_DRIVES">Make disconnected network drives available for mounting</entry>

<entry lang="en" key="PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds %d bytes.</entry>

<entry lang="en" key="PASSWORD_UTF8_INVALID">The entered password contains Unicode characters that couldn't be converted to UTF-8 representation.</entry>

<entry lang="en" key="INIT_DLL">Error: Failed to load a system library.</entry>

<entry lang="en" key="ERR_EXFAT_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected exFAT filesystem.</entry>

<entry lang="en" key="IDT_ENTROPY_BAR">Randomness Collected From Mouse Movements</entry>

<entry lang="en" key="IDT_VOLUME_ID">Volume ID:</entry>

<entry lang="en" key="VOLUME_ID">Volume ID</entry>

<entry lang="en" key="IDC_FAVORITE_USE_VOLUME_ID">Use Volume ID to mount favorite</entry>

<entry lang="en" key="VOLUME_ID_INVALID">The Volume ID value is invalid</entry>

<entry lang="en" key="VOLUME_ID_NOT_FOUND">No Volume with the specified ID was found on the system</entry>

<entry lang="en" key="IDPM_COPY_VALUE_TO_CLIPBOARD">Copy Value to Clipboard...</entry>

<entry lang="en" key="IDC_DISABLE_BOOT_LOADER_PIM_PROMPT">Do not request PIM in the pre-boot authentication screen (PIM value is stored unencrypted on disk)</entry>

<entry lang="en" key="DISABLE_BOOT_LOADER_PIM_PROMPT">WARNING: Please keep in mind that if you enable this option, the PIM value will be stored unencrypted on the disk.\n\nAre you sure you want to enable this option?</entry>

<entry lang="en" key="PIM_TOO_BIG">Personal Iterations Multiplier (PIM) maximum value is 2147468.</entry>

<entry lang="en" key="IDC_SKIP_RESCUE_VERIFICATION">Skip Rescue Disk verification</entry>

<entry lang="en" key="IDC_HIDE_WAITING_DIALOG">Don't show wait message dialog when performing operations</entry>

<entry lang="en" key="IDC_DISABLE_BOOT_LOADER_HASH_PROMPT">Do not request Hash algorithm in the pre-boot authentication screen</entry>

<entry lang="en" key="KUZNYECHIK_HELP">Kuznyechik is a block cipher first published in 2015 and defined in the National Standard of the Russian Federation GOST R 34.12-2015 and also in RFC 7801. 256-bit key, 128-bit block. Mode of operation is XTS.</entry>

<entry lang="en" key="CAMELLIA_HELP">Jointly developed by Mitsubishi Electric and NTT of Japan. First published on 2000. 256-bit key, 128-bit block. Mode of operation is XTS. It has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.</entry>

<entry lang="en" key="TIME">Time</entry>

<entry lang="en" key="ITERATIONS">Iterations</entry>

<entry lang="en" key="PRE-BOOT">Pre-Boot</entry>

<entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO">The Rescue Disk ZIP image has been created and stored in this file:\n%s\n\nNow you need to extract it to a USB stick that is formatted as FAT/FAT32.\n\n%lsAfter you create the Rescue Disk, click Next to verify that it has been correctly created.</entry>

<entry lang="en" key="RESCUE_DISK_EFI_EXTRACT_INFO_NOTE">IMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\n</entry>

<entry lang="en" key="RESCUE_DISK_EFI_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk, please eject and reinsert the USB stick; then click Next to try again. If this does not help, please try another USB stick and/or another ZIP software.\n\nIf you have not extracted the Rescue Disk yet, please do so, and then click Next.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created before you started this wizard, please note that such Rescue Disk cannot be used, because it was created for a different master key. You need to extract the newly generated Rescue Disk ZIP image.</entry>

<entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CHECK_FAILED">Cannot verify that the Rescue Disk has been correctly extracted.\n\nIf you have extracted the Rescue Disk image to a USB stick, please eject it and reinsert it; then try again. If this does not help, please try other ZIP software and/or medium.\n\nIf you attempted to verify a VeraCrypt Rescue Disk created for a different master key, password, salt, etc., please note that such Rescue Disk will always fail this verification. To create a new Rescue Disk fully compatible with your current configuration, select 'System' > 'Create Rescue Disk'.</entry>

<entry lang="en" key="RESCUE_DISK_EFI_NON_WIZARD_CREATION">The Rescue Disk image has been created and stored in this file:\n%s\n\nNow you need to extract the Rescue Disk image to a USB stick that is formatted as FAT/FAT32.\n\nIMPORTANT: Note that the zip file must be extracted directly to the root of the USB stick. For example, if the drive letter of the USB stick is E: then extracting the zip file should create a folder E:\\EFI on the USB stick.\n\nAfter you create the Rescue Disk, select 'System' > 'Verify Rescue Disk' to verify that it has been correctly created.</entry>

<entry lang="en" key="IDC_SECURE_DESKTOP_PASSWORD_ENTRY">Use Secure Desktop for password entry</entry>

<entry lang="en" key="ERR_REFS_INVALID_VOLUME_SIZE">The volume file size specified in the command line is incompatible with selected ReFS filesystem.</entry>

<entry lang="en" key="IDC_EDIT_DCSPROP">Edit Boot Loader Configuration</entry>

<entry lang="en" key="IDC_SHOW_PLATFORMINFO">Display EFI Platform Information</entry>

<entry lang="en" key="BOOT_LOADER_CONFIGURATION_FILE">Boot Loader Configuration File</entry>

<entry lang="en" key="EFI_PLATFORM_INFORMATION">EFI Platform Information</entry>

<entry lang="en" key="EDIT_DCSPROP_FOR_ADVANCED_ONLY">WARNING: Inexperienced users should never attempt to manually edit boot loader configurations.\n\nContinue?</entry>

<entry lang="en" key="DCSPROP_XML_VALIDATION_FAILED">WARNING: Failed to validate the XML format of the Boot Loader configuration. Please check your modifications.</entry>

<entry lang="en" key="IDT_ADVANCED_OPTIONS">Advanced Options</entry>

<entry lang="en" key="AFTER_UPGRADE_RESCUE_DISK">It is strongly recommended that you create a new VeraCrypt Rescue Disk (which will contain the new version of the VeraCrypt Boot Loader) by selecting 'System' > 'Create Rescue Disk'.\nDo you want to do it now?</entry>

<entry lang="en" key="IDC_ALLOW_TRIM_NONSYS_SSD">Allow TRIM command for non-system SSD partition/drive</entry>

<entry lang="en" key="IDC_BLOCK_SYSENC_TRIM">Block TRIM command on system partition/drive</entry>

<entry lang="en" key="WINDOWS_EFI_BOOT_LOADER_MISSING">ERROR: Windows EFI system loader could not be located on the disk. Operation will be aborted.</entry>

<entry lang="en" key="SYSENC_EFI_UNSUPPORTED_SECUREBOOT">It is currently not possible to encrypt a system if SecureBoot is enabled and if VeraCrypt custom keys are not loaded into the machine firmware. SecureBoot needs to be disabled in the BIOS configuration in order to allow system encryption to proceed.</entry>

<entry lang="en" key="PASSWORD_PASTED_TRUNCATED">Pasted text truncated because the password maximum length is %d characters</entry>

<entry lang="en" key="PASSWORD_MAXLENGTH_REACHED">Password already reached its maximum length of %d characters.\nNo additional character is allowed.</entry>

<entry lang="en" key="IDC_SELECT_LANGUAGE_LABEL">Select the language to use during the installation:</entry>

<entry lang="en" key="VOLUME_TOO_LARGE_FOR_HOST">ERROR: The size of the file container is larger than the available free space on disk.</entry>

<entry lang="en" key="CONFIRM_ALLOW_WINDOWS_DEFRAG">WARNING: Defragmenting non-system partitions/drives may leak metadata about their content or cause issues with hidden volumes they may contain.\n\nContinue?</entry>

<entry lang="en" key="VIRTUAL_DEVICE">Virtual Device</entry>

<entry lang="en" key="MOUNTED_VOLUME_NOT_ASSOCIATED">The selected mounted volume is not associated with its drive letter in Windows and so it can not be opened in Windows Explorer.</entry>

<entry lang="en" key="IDC_CLEAR_KEYS_ON_NEW_DEVICE_INSERTION">Clear encryption keys from memory if a new device is inserted</entry>

<entry lang="en" key="CLEAR_KEYS_ON_DEVICE_INSERTION_WARNING">IMPORTANT NOTES:\n - Please keep in mind that this option will not persist after a shutdown/reboot so you will need to select it again next time the machine is started.\n\n - With this option enabled and after a new device is connected, the machine will freeze and it will eventually crash with a BSOD since Windows can not access the encrypted disk after its keys are cleared from memory.\n</entry>

<entry lang="en" key="STARTING">Starting</entry>

<entry lang="en" key="IDC_ENABLE_CPU_RNG">Use CPU hardware random generator as an additional source of entropy</entry>

<entry lang="en" key="IDC_USE_LEGACY_MAX_PASSWORD_LENGTH">Use legacy maximum password length (64 characters)</entry>

<entry lang="en" key="IDC_ENABLE_RAM_ENCRYPTION">Activate encryption of keys and passwords stored in RAM</entry>

<entry lang="en" key="IDT_BENCHMARK">Benchmark:</entry>

<entry lang="en" key="IDC_DISABLE_MOUNT_MANAGER">Only create virtual device without mounting on selected drive letter</entry>

<entry lang="en" key="LEGACY_PASSWORD_UTF8_TOO_LONG">The entered password is too long: its UTF-8 representation exceeds 64 bytes.</entry>

<entry lang="en" key="HIDDEN_CREDS_SAME_AS_OUTER">The Hidden volume can't have the same password, PIM and keyfiles as the Outer volume</entry>

<entry lang="en" key="SYSENC_BITLOCKER_CONFLICT">VeraCrypt does not support encrypting a system drive that is already encrypted by BitLocker.</entry>

<entry lang="en" key="IDC_UPDATE_BOOTLOADER_ON_SHUTDOWN">Automatically fix boot configuration issues that may prevent Windows from starting</entry>

<entry lang="en" key="IDC_FORCE_NEXT_BOOT_VERACRYPT">Force machine to boot on VeraCrypt in the next startup</entry>

<entry lang="en" key="IDC_FORCE_VERACRYPT_BOOT_ENTRY">Force the presence of VeraCrypt entry in the EFI firmware boot menu</entry>

<entry lang="en" key="IDC_FORCE_VERACRYPT_FIRST_BOOT_ENTRY">Force VeraCrypt entry to be the first in the EFI firmware boot menu</entry>

<entry lang="en" key="RAM_ENCRYPTION_DISABLE_HIBERNATE">WARNING: RAM encryption is not compatible with Windows Hibernate and Windows Fast Startup features. VeraCrypt needs to disable them before activating RAM encryption.\n\nContinue?</entry>

<entry lang="en" key="CONFIRM_DISABLE_FAST_STARTUP">WARNING: Windows Fast Startup is enabled and it is known to cause issues when working with VeraCrypt volumes. It is advised to disable it for better security and usability.\n\nDo you want to disable Windows Fast Startup?</entry>

<entry lang="en" key="QUICK_FORMAT_HELP">In order to enable your operating system to mount your new volume, it has to be formatted with a filesystem. Please select a filesystem type.\n\nIf your volume is going to be hosted on a device or partition, you can use 'Quick format' to skip encryption of free space of the volume.</entry>

<entry lang="en" key="IDC_ENABLE_HARDWARE_ENCRYPTION_NEG">Do not accelerate AES encryption/decryption by using the AES instructions of the processor</entry>

<entry lang="en" key="IDM_ADD_ALL_VOLUME_TO_FAVORITES">Add All Mounted Volumes to Favorites...</entry>

<entry lang="en" key="TASKICON_PREF_MENU_ITEMS">Task Icon Menu Items</entry>

<entry lang="en" key="TASKICON_PREF_OPEN_VOL">Open Mounted Volumes</entry>

<entry lang="en" key="TASKICON_PREF_DISMOUNT_VOL">Dismount Mounted Volumes</entry>

<entry lang="en" key="DISK_FREE">Free space available: {0}</entry>

<entry lang="en" key="VOLUME_SIZE_HELP">Please specify the size of the container to create. Note that the minimum possible size of a volume is 292 KiB.</entry>

<entry lang="en" key="LINUX_CONFIRM_INNER_VOLUME_CALC">WARNING: You have selected a filesystem other than FAT for the outer volume.\nPlease Note that in this case VeraCrypt can't calculate the exact maximum allowed size for the hidden volume and it will use only an estimation that can be wrong.\nThus, it is your responsibility to use an adequate value for the size of the hidden volume so that it does not overlap the outer volume.\n\nDo you want to continue using the selected filesystem for the outer volume?</entry>

<entry lang="en" key="LINUX_PREF_TAB_SECURITY">Security</entry>

<entry lang="en" key="LINUX_PREF_TAB_MOUNT_OPTIONS">Mount Options</entry>

<entry lang="en" key="LINUX_PREF_TAB_BACKGROUND_TASK">Background Task</entry>

<entry lang="en" key="LINUX_PREF_TAB_SYSTEM_INTEGRATION">System Integration</entry>

<entry lang="en" key="LINUX_PREF_TAB_SYSTEM_INTEGRATION_EXPLORER">Filesystem Explorer</entry>

<entry lang="en" key="LINUX_PREF_TAB_PERFORMANCE">Performance</entry>

<entry lang="en" key="LINUX_EX2MSG_MOUNTPOINTREQUIRED">Mount point required.</entry>

<entry lang="en" key="LINUX_EX2MSG_MOUNTPOINTUNAVAILABLE">Mount point is already in use.</entry>

<entry lang="en" key="LINUX_EX2MSG_PASSWORDEMPTY">No password or keyfile specified.</entry>

<entry lang="en" key="LINUX_EX2MSG_PASSWORDORKEYBOARDLAYOUTINCORRECT">\n\nNote that pre-boot authentication passwords need to be typed in the pre-boot environment where non-US keyboard layouts are not available. Therefore, pre-boot authentication passwords must always be typed using the standard US keyboard layout (otherwise, the password will be typed incorrectly in most cases). However, note that you do NOT need a real US keyboard; you just need to change the keyboard layout in your operating system.</entry>

<entry lang="en" key="LINUX_EX2MSG_PASSWORDORMOUNTOPTIONSINCORRECT">\n\nNote: If you are attempting to mount a partition located on an encrypted system drive without pre-boot authentication or to mount the encrypted system partition of an operating system that is not running, you can do so by selecting 'Options >' > 'Mount partition using system encryption'.</entry>

<entry lang="en" key="LINUX_EX2MSG_PASSWORDTOOLONG">Password is longer than {0} characters.</entry>

<entry lang="en" key="LINUX_EX2MSG_PARTITIONDEVICEREQUIRED">Partition device required.</entry>

<entry lang="en" key="LINUX_EX2MSG_PROTECTIONPASSWORDINCORRECT">Incorrect password to the protected hidden volume or the hidden volume does not exist.</entry>

<entry lang="en" key="LINUX_EX2MSG_PROTECTIONPASSWORDKEYFILESINCORRECT">Incorrect keyfile(s) and/or password to the protected hidden volume or the hidden volume does not exist.</entry>

<entry lang="en" key="LINUX_EX2MSG_STRINGCONVERSIONFAILED">Invalid characters encountered.</entry>

<entry lang="en" key="LINUX_EX2MSG_STRINGFORMATTEREXCEPTION">Error while parsing formatted string.</entry>

<entry lang="en" key="LINUX_EX2MSG_TEMPORARYDIRECTORYFAILURE">Failed to create a file or directory in a temporary directory.\n\nPlease make sure that the temporary directory exists, its security permissions allow you to access it, and there is sufficient disk space.</entry>

<entry lang="en" key="LINUX_EX2MSG_UNSUPPORTEDSECTORSIZEHIDDENVOLUMEPROTECTION">Error: The drive uses a sector size other than 512 bytes.\n\nDue to limitations of components available on your platform, outer volumes hosted on the drive cannot be mounted using hidden volume protection.\n\nPossible solutions:\n- Use a drive with 512-byte sectors.\n- Create a file-hosted volume (container) on the drive.\n- Backup the contents of the hidden volume and then update the outer volume.</entry>

<entry lang="en" key="LINUX_EX2MSG_UNSUPPORTEDSECTORSIZENOKERNELCRYPTO">Error: The drive uses a sector size other than 512 bytes.\n\nDue to limitations of components available on your platform, partition/device-hosted volumes on the drive can only be mounted using kernel cryptographic services.\n\nPossible solutions:\n- Enable use of the kernel cryptographic services (Preferences > System Integration).\n- Use a drive with 512-byte sectors.\n- Create a file-hosted volume (container) on the drive.</entry>

<entry lang="en" key="LINUX_EX2MSG_UNSUPPORTEDSECTORSIZE">Error: The drive uses a sector size other than 512 bytes.\n\nDue to limitations of components available on your platform, partition/device-hosted volumes cannot be created/used on the drive.\n\nPossible solutions:\n- Create a file-hosted volume (container) on the drive.\n- Use a drive with 512-byte sectors.\n- Use VeraCrypt on another platform.</entry>

<entry lang="en" key="LINUX_EX2MSG_VOLUMEHOSTINUSE">The host file/device is already in use.</entry>

<entry lang="en" key="LINUX_EX2MSG_VOLUMESLOTUNAVAILABLE">Volume slot unavailable.</entry>

<entry lang="en" key="LINUX_EX2MSG_HIGHERFUSEVERSIONREQUIRED">VeraCrypt requires OSXFUSE 2.5 or above.</entry>

<entry lang="en" key="EXCEPTION_OCCURRED">Exception occurred</entry>

<entry lang="en" key="ENTER_PASSWORD">Enter password</entry>

<entry lang="en" key="ENTER_TC_VOL_PASSWORD">Enter VeraCrypt Volume Password</entry>

<entry lang="en" key="MOUNT">Mount</entry>

<entry lang="en" key="MOUNT_POINT">Mount Directory</entry>

<entry lang="en" key="NO_VOLUMES_MOUNTED">No volumes mounted.</entry>

<entry lang="en" key="OPEN_NEW_VOLUME">Specify a New VeraCrypt Volume</entry>

<entry lang="en" key="PARAMETER_INCORRECT">Parameter incorrect</entry>

<entry lang="en" key="SELECT_KEYFILES">Select Keyfiles</entry>

<entry lang="en" key="START_TC">Start VeraCrypt</entry>

<entry lang="en" key="VOLUME_ALREADY_MOUNTED">The volume {0} is already mounted.</entry>

<entry lang="en" key="UNKNOWN_OPTION">Unknown option</entry>

<entry lang="en" key="VOLUME_LOCATION">Volume Location</entry>

<entry lang="en" key="VOLUME_HOST_IN_USE">WARNING: The host file/device {0} is already in use!\n\nIgnoring this can cause undesired results including system instability. All applications that might be using the host file/device should be closed before mounting the volume.\n\nContinue mounting?</entry>

<entry lang="en" key="CANT_INSTALL_WITH_EXE_OVER_MSI">VeraCrypt was previously installed using an MSI package and so it can't be updated using the standard installer.\n\nPlease use the MSI package to update your VeraCrypt installation.</entry>

<entry lang="en" key="IDC_USE_ALL_FREE_SPACE">Use all available free space</entry>

<entry lang="en" key="SYS_ENCRYPTION_UPGRADE_UNSUPPORTED_ALGORITHM">VeraCrypt cannot be upgraded because the system partition/drive was encrypted using an algorithm that is not supported anymore.\nPlease decrypt your system before upgrading VeraCrypt and then encrypt it again.</entry>

</localization>

<xs:schema attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema">

<xs:element name="VeraCrypt">

<xs:complexType>

<xs:sequence>

<xs:element name="localization">

<xs:complexType>

<xs:sequence>

<xs:element name="language">

<xs:complexType>

<xs:attribute name="langid" type="xs:string" use="required" />

<xs:attribute name="name" type="xs:string" use="required" />

<xs:attribute name="en-name" type="xs:string" use="required" />

<xs:attribute name="version" type="xs:string" use="required" />

<xs:attribute name="translators" type="xs:string" use="required" />

</xs:complexType>

</xs:element>

<xs:element minOccurs="4" maxOccurs="4" name="font">

<xs:complexType>

<xs:attribute name="lang" type="xs:string" use="required" />

<xs:attribute name="class" type="xs:string" use="required" />

<xs:attribute name="size" type="xs:unsignedByte" use="required" />

<xs:attribute name="face" type="xs:string" use="required" />

</xs:complexType>

</xs:element>

<xs:element maxOccurs="unbounded" name="entry">

<xs:complexType>

<xs:simpleContent>

<xs:extension base="xs:string">

<xs:attribute name="lang" type="xs:string" use="required" />

<xs:attribute name="key" type="xs:string" use="required" />

</xs:extension>

</xs:simpleContent>

</xs:complexType>

</xs:element>

and which is governed by the 'License Agreement for Encryption for the Masses'

Modifications and additions to the original source code (contained in this file)

and all other portions of this file are Copyright (c) 2013-2017 IDRIX

and are governed by the Apache License 2.0 the full text of which is

contained in the file License.txt included in VeraCrypt binary and source

code distribution packages. */

#include "Tcdefs.h"

#include "Crypto.h"

#include "Volumes.h"

#include "Password.h"

#include "Dlgcode.h"

#include "Language.h"

#include "Pkcs5.h"

#include "Endian.h"

#include "Random.h"

#include <io.h>

#include <strsafe.h>

#ifndef SRC_POS

#define SRC_POS (__FUNCTION__ ":" TC_TO_STRING(__LINE__))

#endif

void VerifyPasswordAndUpdate (HWND hwndDlg, HWND hButton, HWND hPassword,

HWND hVerify, unsigned char *szPassword,

char *szVerify,

BOOL keyFilesEnabled)

{

wchar_t szTmp1[MAX_PASSWORD + 1];

wchar_t szTmp2[MAX_PASSWORD + 1];

char szTmp1Utf8[MAX_PASSWORD + 1];

char szTmp2Utf8[MAX_PASSWORD + 1];

int k = GetWindowTextLength (hPassword);

BOOL bEnable = FALSE;

int utf8Len1, utf8Len2;

UNREFERENCED_PARAMETER (hwndDlg); /* Remove warning */

GetWindowText (hPassword, szTmp1, ARRAYSIZE (szTmp1));

GetWindowText (hVerify, szTmp2, ARRAYSIZE (szTmp2));

utf8Len1 = WideCharToMultiByte (CP_UTF8, 0, szTmp1, -1, szTmp1Utf8, MAX_PASSWORD + 1, NULL, NULL);

utf8Len2 = WideCharToMultiByte (CP_UTF8, 0, szTmp2, -1, szTmp2Utf8, MAX_PASSWORD + 1, NULL, NULL);

if (wcscmp (szTmp1, szTmp2) != 0)

bEnable = FALSE;

else if (utf8Len1 <= 0)

bEnable = FALSE;

else

{

if (k >= MIN_PASSWORD || keyFilesEnabled)

bEnable = TRUE;

else

bEnable = FALSE;

}

if (szPassword != NULL)

{

if (utf8Len1 > 0)

memcpy (szPassword, szTmp1Utf8, sizeof (szTmp1Utf8));

else

szPassword [0] = 0;

}

if (szVerify != NULL)

{

if (utf8Len2 > 0)

memcpy (szVerify, szTmp2Utf8, sizeof (szTmp2Utf8));

else

szVerify [0] = 0;

}

burn (szTmp1, sizeof (szTmp1));

burn (szTmp2, sizeof (szTmp2));

burn (szTmp1Utf8, sizeof (szTmp1Utf8));

burn (szTmp2Utf8, sizeof (szTmp2Utf8));

EnableWindow (hButton, bEnable);

}

wchar_t s[MAX_PASSWORD + 1];

len = GetWindowTextLength (hPassword);

if (len > (bUseLegacyMaxPasswordLength? MAX_LEGACY_PASSWORD: MAX_PASSWORD))

return FALSE;

GetWindowTextW (hPassword, s, sizeof (s) / sizeof (wchar_t));

for (i = 0; i < len; i++)

{

if (s[i] >= 0x7f || s[i] < 0x20) // A non-ASCII or non-printable character?

break;

}

burn (s, sizeof(s));

if (i < len)

return FALSE;

}

return TRUE;

}

BOOL CheckPasswordLength (HWND hwndDlg, unsigned __int32 passwordLength, int pim, BOOL bForBoot, int bootPRF, BOOL bSkipPasswordWarning, BOOL bSkipPimWarning)

{

BOOL bootPimCondition = (bForBoot && (bootPRF != SHA512 && bootPRF != WHIRLPOOL))? TRUE : FALSE;

BOOL bCustomPimSmall = ((pim != 0) && (pim < (bootPimCondition? 98 : 485)))? TRUE : FALSE;

if (passwordLength < PASSWORD_LEN_WARNING)

{

if (bCustomPimSmall)

{

Error (bootPimCondition? "BOOT_PIM_REQUIRE_LONG_PASSWORD": "PIM_REQUIRE_LONG_PASSWORD", hwndDlg);

return FALSE;

}

}

#ifndef _DEBUG

else if (bCustomPimSmall)

{

if (!bSkipPimWarning && AskWarnNoYes ("PIM_SMALL_WARNING", hwndDlg) != IDYES)

return FALSE;

}

#endif

if ((pim != 0) && (pim > (bootPimCondition? 98 : 485)))

{

// warn that mount/boot will take more time

Warning ("PIM_LARGE_WARNING", hwndDlg);

}

return TRUE;

}

int ChangePwd (const wchar_t *lpszVolume, Password *oldPassword, int old_pkcs5, int old_pim, BOOL truecryptMode, Password *newPassword, int pkcs5, int pim, int wipePassCount, HWND hwndDlg)

{

int nDosLinkCreated = 1, nStatus = ERR_OS_ERROR;

wchar_t szDiskFile[TC_MAX_PATH], szCFDevice[TC_MAX_PATH];

wchar_t szDosDevice[TC_MAX_PATH];

char buffer[TC_VOLUME_HEADER_EFFECTIVE_SIZE];

PCRYPTO_INFO cryptoInfo = NULL, ci = NULL;

void *dev = INVALID_HANDLE_VALUE;

DWORD dwError;

DWORD bytesRead;

BOOL bDevice;

unsigned __int64 hostSize = 0;

int volumeType;

int wipePass;

FILETIME ftCreationTime;

FILETIME ftLastWriteTime;

FILETIME ftLastAccessTime;

nStatus = 0;

error:

dwError = GetLastError ();

burn (buffer, sizeof (buffer));

if (cryptoInfo != NULL)

crypto_close (cryptoInfo);

if (bTimeStampValid)

SetFileTime (dev, &ftCreationTime, &ftLastAccessTime, &ftLastWriteTime);

if (dev != INVALID_HANDLE_VALUE)

CloseHandle ((HANDLE) dev);

if (nDosLinkCreated == 0)

RemoveFakeDosName (szDiskFile, szDosDevice);

RandStop (FALSE);

NormalCursor ();

SetLastError (dwError);

if (nStatus == ERR_OS_ERROR && dwError == ERROR_ACCESS_DENIED

&& bDevice

&& !UacElevated

&& IsUacSupported ())

return nStatus;

if (nStatus != 0)

handleError (hwndDlg, nStatus, SRC_POS);

return nStatus;

}

VALUE "ProductVersion", "1.26"

END

END

BLOCK "VarFileInfo"

BEGIN

VALUE "Translation", 0x409, 1200

END

END

/////////////////////////////////////////////////////////////////////////////

//

// HEADER

//

IDR_FORMAT_RSRC_HEADER HEADER "resource.h"

/////////////////////////////////////////////////////////////////////////////

//

// TYPELIB

//

IDR_FORMAT_TLB TYPELIB "Format.tlb"

/////////////////////////////////////////////////////////////////////////////

//

// Dialog

//

IDD_VOL_CREATION_WIZARD_DLG DIALOGEX 0, 0, 450, 250

STYLE DS_SETFONT | DS_SETFOREGROUND | DS_FIXEDSYS | DS_CENTER | WS_MINIMIZEBOX | WS_POPUP | WS_CAPTION | WS_SYSMENU

CAPTION "VeraCrypt Volume Creation Wizard"

CLASS "VeraCryptCustomDlg"

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

PUSHBUTTON "Cancel",IDCANCEL,382,234,60,14

LTEXT "",IDC_POS_BOX,160,24,281,193

END

IDD_CIPHER_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

COMBOBOX IDC_COMBO_BOX,7,23,172,126,CBS_DROPDOWNLIST | WS_VSCROLL | WS_TABSTOP

PUSHBUTTON "&Test",IDC_CIPHER_TEST,191,22,81,14

PUSHBUTTON "&Benchmark",IDC_BENCHMARK,191,122,81,14

COMBOBOX IDC_COMBO_BOX_HASH_ALGO,7,169,95,126,CBS_DROPDOWNLIST | WS_VSCROLL | WS_TABSTOP

LTEXT "",IDC_BOX_HELP,7,40,266,78

GROUPBOX "Encryption Algorithm",IDT_ENCRYPTION_ALGO,0,10,273,131

GROUPBOX "Hash Algorithm",IDT_HASH_ALGO,0,156,273,35

LTEXT "More information",IDC_LINK_MORE_INFO_ABOUT_CIPHER,7,124,176,10,SS_NOTIFY

LTEXT "Information on hash algorithms",IDC_LINK_HASH_INFO,121,171,148,8,SS_NOTIFY

END

IDD_PASSWORD_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

END

IDD_SIZE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

EDITTEXT IDC_SIZEBOX,0,22,96,14,ES_AUTOHSCROLL | ES_NUMBER

CONTROL "&KB",IDC_KB,"Button",BS_AUTORADIOBUTTON | WS_GROUP | WS_TABSTOP,105,25,27,10

CONTROL "&MB",IDC_MB,"Button",BS_AUTORADIOBUTTON,140,25,27,10

CONTROL "&GB",IDC_GB,"Button",BS_AUTORADIOBUTTON,175,25,27,10

LTEXT "",IDC_BOX_HELP,0,65,273,123

LTEXT "",IDC_SPACE_LEFT,0,44,273,18

CONTROL "&TB",IDC_TB,"Button",BS_AUTORADIOBUTTON,210,25,27,10

END

IDD_VOLUME_LOCATION_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

COMBOBOX IDC_COMBO_BOX,0,9,174,80,CBS_DROPDOWN | CBS_AUTOHSCROLL | WS_VSCROLL | WS_TABSTOP

CONTROL "&Never save history",IDC_NO_HISTORY,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,3,28,270,10

PUSHBUTTON "",IDC_SELECT_VOLUME_LOCATION,181,9,92,14

LTEXT "",IDC_BOX_HELP,0,45,273,143

END

IDD_FORMAT_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

COMBOBOX IDC_FILESYS,50,13,36,90,CBS_DROPDOWNLIST | WS_TABSTOP

COMBOBOX IDC_CLUSTERSIZE,135,13,42,90,CBS_DROPDOWNLIST | WS_TABSTOP

CONTROL "Quick Format",IDC_QUICKFORMAT,"Button",BS_AUTOCHECKBOX | BS_MULTILINE | WS_TABSTOP,181,9,92,8

CONTROL "",IDC_SHOW_KEYS,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,265,38,9,8

PUSHBUTTON "Abort",IDC_ABORT_BUTTON,200,75,64,14

RTEXT "Header Key: ",IDT_HEADER_KEY,2,47,76,8

LTEXT "",IDC_BYTESWRITTEN,29,93,39,11,SS_CENTERIMAGE,WS_EX_TRANSPARENT | WS_EX_RIGHT | WS_EX_STATICEDGE

RTEXT "Done",IDT_DONE,5,94,22,8

RTEXT "Speed",IDT_SPEED,81,94,45,8

RTEXT "Left",IDT_LEFT,177,94,35,8

GROUPBOX "",IDC_STATIC,0,67,276,41

RTEXT "Filesystem ",IDT_FILESYSTEM,1,15,46,8,0,WS_EX_RIGHT

RTEXT "Random Pool: ",IDT_RANDOM_POOL,2,39,76,8

GROUPBOX "",IDC_STATIC,0,32,276,35

CONTROL "",IDC_RANDOM_BYTES,"Static",SS_SIMPLE | WS_GROUP,83,38,177,8,WS_EX_TRANSPARENT

GROUPBOX "Randomness Collected From Mouse Movements",IDT_ENTROPY_BAR,0,175,276,18

CONTROL "",IDC_ENTROPY_BAR,"msctls_progress32",WS_BORDER,20,184,235,6

CONTROL "Dynamic",SPARSE_FILE,"Button",BS_AUTOCHECKBOX | BS_MULTILINE | WS_TABSTOP,181,21,92,8

END

IDD_INTRO_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

CONTROL "Create an encrypted file container",IDC_FILE_CONTAINER,

"Button",BS_AUTORADIOBUTTON,0,7,269,10

LTEXT "More information",IDC_MORE_INFO_ON_CONTAINERS,16,40,253,10,SS_NOTIFY

CONTROL "Encrypt a non-system partition/drive",IDC_NONSYS_DEVICE,

"Button",BS_AUTORADIOBUTTON,0,55,269,10

CONTROL "Encrypt the system partition or entire system drive",IDC_SYS_DEVICE,

"Button",BS_AUTORADIOBUTTON,0,98,269,10

LTEXT "More information about system encryption",IDC_MORE_INFO_ON_SYS_ENCRYPTION,16,177,253,10,SS_NOTIFY

LTEXT "Creates a virtual encrypted disk within a file. Recommended for inexperienced users.",IDT_FILE_CONTAINER,16,20,253,16

LTEXT "Encrypts a non-system partition on any internal or external drive (e.g. a flash drive). Optionally, creates a hidden volume.",IDT_NON_SYS_DEVICE,16,68,253,26

LTEXT "Encrypts the partition/drive where Windows is installed. Anyone who wants to gain access and use the system, read and write files, etc., will need to enter the correct password each time before Windows boots. Optionally, creates a hidden system.",IDT_SYS_DEVICE,16,112,253,59

END

IDD_INFO_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

END

IDD_HIDVOL_HOST_FILL_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

LTEXT "",IDC_BOX_HELP,0,6,269,167

PUSHBUTTON "Open Outer Volume",IDC_OPEN_OUTER_VOLUME,0,176,85,14

END

IDD_HIDDEN_VOL_WIZARD_MODE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

CONTROL "Normal mode",IDC_HIDVOL_WIZ_MODE_FULL,"Button",BS_AUTORADIOBUTTON,0,7,269,10

CONTROL "Direct mode",IDC_HIDVOL_WIZ_MODE_DIRECT,"Button",BS_AUTORADIOBUTTON,0,97,269,10

LTEXT "",IDC_BOX_HELP,16,20,253,72

LTEXT "",IDC_BOX_HELP2,16,110,253,72

END

IDD_PASSWORD_ENTRY_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

EDITTEXT IDC_PASSWORD_DIRECT,75,2,198,14,ES_PASSWORD | ES_AUTOHSCROLL

COMBOBOX IDC_PKCS5_PRF_ID,75,17,131,90,CBS_DROPDOWNLIST | WS_TABSTOP

EDITTEXT IDC_PIM,75,32,42,14,ES_RIGHT | ES_PASSWORD | ES_AUTOHSCROLL | ES_NUMBER | NOT WS_VISIBLE

LTEXT "(Empty or 0 for default iterations)",IDC_PIM_HELP,121,34,152,8,NOT WS_VISIBLE

CONTROL "&Display password",IDC_SHOW_PASSWORD_SINGLE,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,75,46,109,11,WS_EX_TRANSPARENT

CONTROL "U&se keyfiles",IDC_KEYFILES_ENABLE,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,75,57,106,11

PUSHBUTTON "&Keyfiles...",IDC_KEY_FILES,188,54,85,14

LTEXT "",IDC_BOX_HELP,0,74,273,119

RTEXT "Password:",IDT_PASSWORD,0,6,71,8

RTEXT "PKCS-5 PRF:",IDT_PKCS5_PRF,0,19,71,8

RTEXT "Volume PIM:",IDT_PIM,0,35,71,8,NOT WS_VISIBLE

CONTROL "Use P&IM",IDC_PIM_ENABLE,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,75,35,97,10

END

IDD_VOLUME_TYPE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

CONTROL "Standard VeraCrypt volume",IDC_STD_VOL,"Button",BS_AUTORADIOBUTTON,0,7,269,10

CONTROL "Hi&dden VeraCrypt volume ",IDC_HIDDEN_VOL,"Button",BS_AUTORADIOBUTTON,0,76,269,10

LTEXT "More information about hidden volumes",IDC_HIDDEN_VOL_HELP,16,173,253,10,SS_NOTIFY

LTEXT "",IDC_BOX_HELP_NORMAL_VOL,16,20,253,52

LTEXT "",IDC_BOX_HELP,16,93,253,70

END

IDD_SYSENC_SPAN_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

CONTROL "Encrypt the Windows system partition",IDC_SYS_PARTITION,

"Button",BS_AUTORADIOBUTTON,0,7,269,10

CONTROL "Encrypt the whole drive",IDC_WHOLE_SYS_DRIVE,"Button",BS_AUTORADIOBUTTON,0,67,269,10

LTEXT "Select this option to encrypt the partition where the currently running Windows operating system is installed.",IDT_SYS_PARTITION,16,20,253,42

LTEXT "",IDT_WHOLE_SYS_DRIVE,16,82,253,104

END

IDD_SYSENC_RESCUE_DISK_CREATION_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

CONTROL "Skip Rescue Disk verification",IDC_SKIP_RESCUE_VERIFICATION,

END

IDD_SYSENC_COLLECTING_RANDOM_DATA_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

CONTROL "Display pool content",IDC_DISPLAY_POOL_CONTENTS,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,10,93,266,10

CONTROL "",IDC_SYS_POOL_CONTENTS,"Static",SS_LEFTNOWORDWRAP | WS_GROUP,33,17,209,63,WS_EX_TRANSPARENT

LTEXT "IMPORTANT: Move your mouse as randomly as possible within this window. The longer you move it, the better. This significantly increases the cryptographic strength of the encryption keys. Then click Next to continue.",IDT_COLLECTING_RANDOM_DATA_NOTE,10,107,265,63

GROUPBOX "Current pool content (partial)",IDT_PARTIAL_POOL_CONTENTS,0,5,276,83

GROUPBOX "Randomness Collected From Mouse Movements",IDT_ENTROPY_BAR,0,174,276,18

CONTROL "",IDC_ENTROPY_BAR,"msctls_progress32",WS_BORDER,11,183,254,6

END

IDD_SYSENC_MULTI_BOOT_MODE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

CONTROL "Single-boot",IDC_SINGLE_BOOT,"Button",BS_AUTORADIOBUTTON,0,7,269,10

CONTROL "Multi-boot",IDC_MULTI_BOOT,"Button",BS_AUTORADIOBUTTON,0,75,217,10

LTEXT "Select this option if there is only one operating system installed on this computer (even if it has multiple users).",IDT_SINGLE_BOOT,16,20,253,48

LTEXT "Select this option if there are two or more operating systems installed on this computer.\n\nFor example:\n- Windows XP and Windows XP\n- Windows XP and Windows Vista\n- Windows and Mac OS X\n- Windows and Linux\n- Windows, Linux and Mac OS X",IDT_MULTI_BOOT,16,89,253,90

END

IDD_SYSENC_RESCUE_DISK_BURN_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

END

IDD_SYSENC_WIPE_MODE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

END

IDD_INPLACE_ENCRYPTION_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

END

IDD_SYSENC_KEYS_GEN_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

CONTROL "Display generated keys (their portions)",IDC_DISPLAY_KEYS,

"Button",BS_AUTOCHECKBOX | WS_TABSTOP,51,110,216,10

CONTROL "",IDC_HEADER_KEY,"Static",SS_LEFTNOWORDWRAP | WS_GROUP,100,87,163,8,WS_EX_TRANSPARENT

LTEXT "",IDC_DISK_KEY,100,95,163,8,0,WS_EX_TRANSPARENT

LTEXT "The keys, salt, and other data have been successfully generated. If you want to generate new keys, click Back and then Next. Otherwise, click Next to continue.",IDT_SYSENC_KEYS_GEN_INFO,1,23,266,57

RTEXT "Header Key: ",IDT_HEADER_KEY,2,88,93,8

RTEXT "Master Key: ",IDT_MASTER_KEY,2,96,93,8

GROUPBOX "",-1,0,81,267,26

END

IDD_UNIVERSAL_DUAL_CHOICE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

CONTROL "",IDC_CHOICE1,"Button",BS_AUTORADIOBUTTON,0,7,269,10

CONTROL "",IDC_CHOICE2,"Button",BS_AUTORADIOBUTTON,0,17,269,10

LTEXT "",IDC_BOX_HELP,1,34,268,152

END

IDD_SYSENC_DRIVE_ANALYSIS_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

LTEXT "",IDT_SYSENC_DRIVE_ANALYSIS_INFO,0,10,267,109

CONTROL "",IDC_PROGRESS_BAR,"msctls_progress32",PBS_SMOOTH | WS_BORDER,0,135,267,12

LTEXT "Progress:",IDT_PROGRESS,2,124,172,8

END

IDD_SYSENC_TYPE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

END

IDD_SYSENC_HIDDEN_OS_REQ_CHECK_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

LTEXT "More information",IDC_HIDDEN_SYSENC_INFO_LINK,0,172,273,10,SS_NOTIFY

LTEXT "",IDC_BOX_HELP,0,2,273,166

END

IDD_DEVICE_WIPE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

PUSHBUTTON "Abort",IDC_ABORT_BUTTON,217,48,50,14

LTEXT "",IDC_BYTESWRITTEN,29,66,39,11,SS_CENTERIMAGE,WS_EX_TRANSPARENT | WS_EX_RIGHT | WS_EX_STATICEDGE

RTEXT "",IDC_WRITESPEED,119,66,46,11,SS_CENTERIMAGE | NOT WS_VISIBLE,WS_EX_TRANSPARENT | WS_EX_RIGHT | WS_EX_STATICEDGE

RTEXT "",IDC_TIMEREMAIN,219,66,48,11,SS_CENTERIMAGE,WS_EX_TRANSPARENT | WS_EX_RIGHT | WS_EX_STATICEDGE

RTEXT "Wipe mode:",IDT_WIPE_MODE,6,22,92,8,0,WS_EX_RIGHT

CONTROL "",IDC_PROGRESS_BAR,"msctls_progress32",PBS_SMOOTH | WS_BORDER,6,49,208,12

RTEXT "Done",IDT_DONE,5,67,22,8

RTEXT "Pass",IDT_PASS,73,67,44,8,NOT WS_VISIBLE

RTEXT "Left",IDT_LEFT,180,67,34,8

LTEXT "",IDC_BOX_HELP,1,96,266,91

GROUPBOX "",IDT_FORMAT_OPTIONS,0,10,267,29

GROUPBOX "",IDC_STATIC,0,40,267,42

LTEXT "",IDC_WIPE_MODE,101,21,125,11,SS_CENTERIMAGE,WS_EX_TRANSPARENT | WS_EX_STATICEDGE

END

IDD_DEVICE_WIPE_MODE_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

COMBOBOX IDC_WIPE_MODE,89,9,127,90,CBS_DROPDOWNLIST | WS_TABSTOP

RTEXT "Wipe mode:",IDT_WIPE_MODE,0,11,86,8,0,WS_EX_RIGHT

LTEXT "",IDT_WIPE_MODE_INFO,0,29,269,157

END

CONTROL "Encrypt partition in place",IDC_DEVICE_TRANSFORM_MODE_INPLACE,

"Button",BS_AUTORADIOBUTTON,0,111,269,10

LTEXT "",IDC_BOX_HELP,16,21,253,84

LTEXT "",IDC_BOX_HELP2,16,125,253,61

END

IDD_EXPANDED_LIST_SELECT_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

LTEXT "",IDC_BOX_HELP,0,117,269,69

LISTBOX IDC_LIST_BOX,0,3,269,107,LBS_NOINTEGRALHEIGHT | LBS_DISABLENOSCROLL | WS_VSCROLL

END

IDD_DRIVE_LETTER_SELECTION_PAGE DIALOGEX 0, 0, 277, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 400, 0, 0x1

BEGIN

LTEXT "",IDC_BOX_HELP,0,40,270,146

COMBOBOX IDC_DRIVE_LETTER_LIST,115,15,38,69,CBS_DROPDOWNLIST | WS_VSCROLL | WS_TABSTOP

RTEXT "Drive letter:",IDT_DRIVE_LETTER,5,17,106,8

END

IDD_PIM_PAGE_DLG DIALOGEX 0, 0, 276, 193

STYLE DS_SETFONT | DS_FIXEDSYS | DS_CONTROL | WS_CHILD

FONT 8, "MS Shell Dlg", 0, 0, 0x0

BEGIN

EDITTEXT IDC_PIM,74,0,42,14,ES_RIGHT | ES_PASSWORD | ES_AUTOHSCROLL | ES_NUMBER

LTEXT "",IDC_BOX_HELP,0,32,273,142

RTEXT "Volume PIM:",IDT_PIM,1,3,69,8

LTEXT "(Empty or 0 for default iterations)",IDC_PIM_HELP,120,3,153,8

LTEXT "Information on PIM",IDC_LINK_PIM_INFO,0,179,273,8,SS_NOTIFY

CONTROL "Display PIM",IDC_SHOW_PIM,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,74,17,196,10

END

#ifdef APSTUDIO_INVOKED

/////////////////////////////////////////////////////////////////////////////

//

// TEXTINCLUDE

//

1 TEXTINCLUDE

BEGIN

"resource.h\0"

END

2 TEXTINCLUDE

BEGIN

"#include ""afxres.h""\r\n"

"#include ""..\\\\common\\\\resource.h""\r\n"

"\0"

END

3 TEXTINCLUDE

BEGIN

"#include ""..\\\\common\\\\common.rc""\r\n"

"\0"

END

#endif // APSTUDIO_INVOKED

/////////////////////////////////////////////////////////////////////////////

//

// DESIGNINFO

//

#ifdef APSTUDIO_INVOKED

GUIDELINES DESIGNINFO

BOTTOMMARGIN, 174

HORZGUIDE, 80

HORZGUIDE, 96

END

IDD_SYSENC_MULTI_BOOT_MODE_PAGE_DLG, DIALOG

BEGIN

LEFTMARGIN, 7

RIGHTMARGIN, 269

TOPMARGIN, 7

BOTTOMMARGIN, 186

END

IDD_SYSENC_RESCUE_DISK_BURN_PAGE_DLG, DIALOG

BEGIN

RIGHTMARGIN, 273

BOTTOMMARGIN, 188

END

IDD_SYSENC_WIPE_MODE_PAGE_DLG, DIALOG

BEGIN

LEFTMARGIN, 7

RIGHTMARGIN, 269

TOPMARGIN, 7

BOTTOMMARGIN, 186

END

IDD_INPLACE_ENCRYPTION_PAGE_DLG, DIALOG

BEGIN

RIGHTMARGIN, 267

BOTTOMMARGIN, 187

HORZGUIDE, 80

HORZGUIDE, 96

END

IDD_SYSENC_KEYS_GEN_PAGE_DLG, DIALOG

BEGIN

RIGHTMARGIN, 267

BOTTOMMARGIN, 174

HORZGUIDE, 80

HORZGUIDE, 96

END

IDD_UNIVERSAL_DUAL_CHOICE_PAGE_DLG, DIALOG

BEGIN

LEFTMARGIN, 7

RIGHTMARGIN, 269

TOPMARGIN, 7

BOTTOMMARGIN, 186

END

IDD_SYSENC_DRIVE_ANALYSIS_PAGE_DLG, DIALOG

BEGIN

RIGHTMARGIN, 267

BOTTOMMARGIN, 174

HORZGUIDE, 80

HORZGUIDE, 96

END

IDD_SYSENC_TYPE_PAGE_DLG, DIALOG

BEGIN

LEFTMARGIN, 7

RIGHTMARGIN, 269

TOPMARGIN, 7

BOTTOMMARGIN, 186

END

IDD_SYSENC_HIDDEN_OS_REQ_CHECK_PAGE_DLG, DIALOG

BEGIN

RIGHTMARGIN, 273

END

#endif // APSTUDIO_INVOKED

/////////////////////////////////////////////////////////////////////////////

//

// Bitmap

//

IDB_WIZARD BITMAP "VeraCrypt_wizard.bmp"

/////////////////////////////////////////////////////////////////////////////

//

// String Table

//

STRINGTABLE

BEGIN

IDS_UACSTRING_FMT "VeraCrypt"

END

#endif // English (U.S.) resources

/////////////////////////////////////////////////////////////////////////////

#ifndef APSTUDIO_INVOKED

/////////////////////////////////////////////////////////////////////////////

//

// Generated from the TEXTINCLUDE 3 resource.

//

#include "..\\common\\common.rc"

/////////////////////////////////////////////////////////////////////////////

#endif // not APSTUDIO_INVOKED

#define IDT_RANDOM_POOL 1047

#define IDT_HEADER_KEY 1048

#define IDT_MASTER_KEY 1049

#define IDT_DONE 1050

#define IDT_SPEED 1051

#define IDT_LEFT 1052

#define IDT_CONFIRM 1053

#define IDT_PASSWORD 1054

#define IDC_SHOW_PASSWORD_SINGLE 1055

#define IDC_SHOW_PASSWORD 1056

#define IDC_LINK_MORE_INFO_ABOUT_CIPHER 1057

#define IDC_LINK_HASH_INFO 1058

#define IDC_POS_BOX 1059

#define IDC_BITMAP_WIZARD 1060

#define IDC_FILE_CONTAINER 1061

#define IDC_NONSYS_DEVICE 1062

#define IDC_SYS_DEVICE 1063

#define IDT_FILE_CONTAINER 1064

#define IDT_NON_SYS_DEVICE 1065

#define IDT_SYS_DEVICE 1066

#define IDC_WHOLE_SYS_DRIVE 1067

#define IDC_SYS_PARTITION 1068

#define IDT_WHOLE_SYS_DRIVE 1069

#define IDT_SYS_PARTITION 1070

#define IDT_RESCUE_DISK_INFO 1071

#define IDC_MORE_INFO 1072

#define IDC_MORE_INFO_ON_SYS_ENCRYPTION 1073

#define IDT_COLLECTING_RANDOM_DATA_NOTE 1074

#define IDC_MORE_INFO_ON_CONTAINERS 1075

#define IDC_SINGLE_BOOT 1076

#define IDC_MULTI_BOOT 1077

#define IDT_MULTI_BOOT 1078

#define IDT_SINGLE_BOOT 1079

#define IDC_SYS_POOL_CONTENTS 1080

#define IDT_PARTIAL_POOL_CONTENTS 1081

#define IDT_RESCUE_DISK_BURN_INFO 1083

#define IDT_WIPE_MODE_INFO 1084

#define IDC_WIPE_MODE 1085

#define IDC_SELECT 1086

#define IDT_SYSENC_KEYS_GEN_INFO 1087

#define IDC_DISPLAY_KEYS 1088

#define IDC_PAUSE 1089

#define IDT_WIPE_MODE 1090

#define IDC_MORE_INFO_SYS_ENCRYPTION 1091

#define IDC_BOX_HELP_NORMAL_VOL 1092

#define IDT_STATUS 1093

#define IDT_PROGRESS 1094

#define IDT_SYSENC_DRIVE_ANALYSIS_INFO 1095

#define IDC_SYSENC_NORMAL 1096

#define IDC_SYSENC_HIDDEN 1097

#define IDC_BOX_HELP_SYSENC_NORMAL 1098

#define IDC_HIDDEN_SYSENC_INFO_LINK 1099

#define IDT_PASS 1100

#define IDC_DEVICE_TRANSFORM_MODE_FORMAT 1101

#define IDC_DEVICE_TRANSFORM_MODE_INPLACE 1102

#define IDC_DRIVE_LETTER_LIST 1103

#define IDT_DRIVE_LETTER 1104

#define IDC_LINK_PIM_INFO 1105

#define IDC_SHOW_PIM 1106

#define IDC_TB 1107

#define IDC_SKIP_RESCUE_VERIFICATION 1108

#define SPARSE_FILE 1109

// Next default values for new objects

//

#ifdef APSTUDIO_INVOKED

#ifndef APSTUDIO_READONLY_SYMBOLS

#define _APS_NO_MFC 1

#define _APS_NEXT_RESOURCE_VALUE 134

#define _APS_NEXT_COMMAND_VALUE 40001

#define _APS_NEXT_CONTROL_VALUE 1110

#define _APS_NEXT_SYMED_VALUE 101

#endif

#endif

/*

Legal Notice: Some portions of the source code contained in this file were

derived from the source code of TrueCrypt 7.1a, which is

Copyright (c) 2003-2012 TrueCrypt Developers Association and which is

governed by the TrueCrypt License 3.0, also from the source code of

Encryption for the Masses 2.02a, which is Copyright (c) 1998-2000 Paul Le Roux

and which is governed by the 'License Agreement for Encryption for the Masses'

Modifications and additions to the original source code (contained in this file)

and all other portions of this file are Copyright (c) 2013-2017 IDRIX

and are governed by the Apache License 2.0 the full text of which is

contained in the file License.txt included in VeraCrypt binary and source

code distribution packages. */

#include "Tcdefs.h"

#include <stdlib.h>

#include <limits.h>

#include <time.h>

#include <errno.h>

#include <io.h>

#include <sys/stat.h>

#include <shlobj.h>

#include "Crypto.h"

#include "cpu.h"

#include "Apidrvr.h"

#include "Dlgcode.h"

#include "Language.h"

#include "Combo.h"

#include "Registry.h"

#include "Boot/Windows/BootDefs.h"

#include "Common/Common.h"

#include "Common/BootEncryption.h"

#include "Common/Dictionary.h"

#include "Common/Endian.h"

#include "Common/resource.h"

#include "Common/Pkcs5.h"

#include "Platform/Finally.h"

#include "Platform/ForEach.h"

#include "Random.h"

#include "Fat.h"

#include "InPlace.h"

#include "Resource.h"

#include "TcFormat.h"

#include "Format.h"

#include "FormatCom.h"

#include "Password.h"

#include "Progress.h"

#include "Tests.h"

#include "Cmdline.h"

#include "Volumes.h"

#include "Wipe.h"

#include "Xml.h"

#include "SecurityToken.h"

#include <Strsafe.h>

SYSENC_PRETEST_RESULT_PAGE,

SYSENC_ENCRYPTION_PAGE,

NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE,

NONSYS_INPLACE_ENC_RESUME_PARTITION_SEL_PAGE,

NONSYS_INPLACE_ENC_RAND_DATA_PAGE,

NONSYS_INPLACE_ENC_WIPE_MODE_PAGE,

NONSYS_INPLACE_ENC_TRANSFORM_PAGE,

NONSYS_INPLACE_ENC_TRANSFORM_FINISHED_PAGE,

NONSYS_INPLACE_DEC_TRANSFORM_FINISHED_DRIVE_LETTER_PAGE,

FORMAT_PAGE,

FORMAT_FINISHED_PAGE,

SYSENC_HIDDEN_OS_INITIAL_INFO_PAGE,

SYSENC_HIDDEN_OS_WIPE_INFO_PAGE,

DEVICE_WIPE_MODE_PAGE,

DEVICE_WIPE_PAGE

};

#define TIMER_INTERVAL_RANDVIEW 30

#define TIMER_INTERVAL_SYSENC_PROGRESS 30

#define TIMER_INTERVAL_NONSYS_INPLACE_ENC_PROGRESS 30

#define TIMER_INTERVAL_SYSENC_DRIVE_ANALYSIS_PROGRESS 100

#define TIMER_INTERVAL_WIPE_PROGRESS 30

#define TIMER_INTERVAL_KEYB_LAYOUT_GUARD 10

enum sys_encryption_cmd_line_switches

{

SYSENC_COMMAND_NONE = 0,

SYSENC_COMMAND_RESUME,

SYSENC_COMMAND_STARTUP_SEQ_RESUME,

SYSENC_COMMAND_ENCRYPT,

SYSENC_COMMAND_DECRYPT,

SYSENC_COMMAND_CREATE_HIDDEN_OS,

SYSENC_COMMAND_CREATE_HIDDEN_OS_ELEV

};

typedef struct

{

int NumberOfSysDrives; // Number of drives that contain an operating system. -1: unknown, 1: one, 2: two or more

int MultipleSystemsOnDrive; // Multiple systems are installed on the drive where the currently running system resides. -1: unknown, 0: no, 1: yes

int BootLoaderLocation; // Boot loader (boot manager) installed in: 1: MBR/1st cylinder, 0: partition/bootsector: -1: unknown

int BootLoaderBrand; // -1: unknown, 0: Microsoft Windows, 1: any non-Windows boot manager/loader

int SystemOnBootDrive; // If the currently running operating system is installed on the boot drive. -1: unknown, 0: no, 1: yes

} SYSENC_MULTIBOOT_CFG;

#define SYSENC_PAUSE_RETRY_INTERVAL 100

#define SYSENC_PAUSE_RETRIES 200

// Expected duration of system drive analysis, in ms

#define SYSENC_DRIVE_ANALYSIS_ETA (4*60000)

BootEncryption *BootEncObj = NULL;

BootEncryptionStatus BootEncStatus;

HWND hCurPage = NULL; /* Handle to current wizard page */

int nCurPageNo = -1; /* The current wizard page */

int nLastPageNo = -1;

volatile int WizardMode = DEFAULT_VOL_CREATION_WIZARD_MODE; /* IMPORTANT: Never change this value directly -- always use ChangeWizardMode() instead. */

volatile BOOL bHiddenOS = FALSE; /* If TRUE, we are performing or (or supposed to perform) actions relating to an operating system installed in a hidden volume (i.e., encrypting a decoy OS partition or creating the outer/hidden volume for the hidden OS). To determine or set the phase of the process, call ChangeHiddenOSCreationPhase() and DetermineHiddenOSCreationPhase()) */

BOOL bDirectSysEncMode = FALSE;

BOOL bDirectSysEncModeCommand = SYSENC_COMMAND_NONE;

BOOL DirectDeviceEncMode = FALSE;

BOOL DirectNonSysInplaceDecStartMode = FALSE;

BOOL DirectNonSysInplaceEncResumeMode = FALSE;

BOOL DirectNonSysInplaceDecResumeMode = FALSE;

BOOL DirectPromptNonSysInplaceEncResumeMode = FALSE;

BOOL DirectCreationMode = FALSE;

volatile BOOL bInPlaceDecNonSys = FALSE; /* If TRUE, existing data on a non-system partition/volume are to be decrypted in place (for system encryption, this flag is ignored) */

volatile BOOL bInPlaceEncNonSysResumed = FALSE; /* If TRUE, the wizard is supposed to resume (or has resumed) process of non-system in-place encryption/decryption. */

volatile BOOL bFirstNonSysInPlaceEncResumeDone = FALSE;

__int64 NonSysInplaceEncBytesDone = 0;

__int64 NonSysInplaceEncTotalSize = 0;

BOOL bDeviceTransformModeChoiceMade = FALSE; /* TRUE if the user has at least once manually selected the 'in-place' or 'format' option (on the 'device transform mode' page). */

int nNeedToStoreFilesOver4GB = 0; /* Whether the user wants to be able to store files larger than 4GB on the volume: -1 = Undecided or error, 0 = No, 1 = Yes */

int nVolumeEA = 1; /* Default encryption algorithm */

BOOL bSystemEncryptionInProgress = FALSE; /* TRUE when encrypting/decrypting the system partition/drive (FALSE when paused). */

BOOL bWholeSysDrive = FALSE; /* Whether to encrypt the entire system drive or just the system partition. */

static BOOL bSystemEncryptionStatusChanged = FALSE; /* TRUE if this instance changed the value of SystemEncryptionStatus (it's set to FALSE each time the system encryption settings are saved to the config file). This value is to be treated as protected -- only the wizard can change this value (others may only read it). */

volatile BOOL bSysEncDriveAnalysisInProgress = FALSE;

volatile BOOL bSysEncDriveAnalysisTimeOutOccurred = FALSE;

int SysEncDetectHiddenSectors = -1; /* Whether the user wants us to detect and encrypt the Host Protect Area (if any): -1 = Undecided or error, 0 = No, 1 = Yes */

int SysEncDriveAnalysisStart;

BOOL bDontVerifyRescueDisk = FALSE;

BOOL bFirstSysEncResumeDone = FALSE;

BOOL bDontCheckFileContainerSize = FALSE; /* If true, we don't check if the given size of file container is smaller than the available size on the hosting disk */

int nMultiBoot = 0; /* The number of operating systems installed on the computer, according to the user. 0: undetermined, 1: one, 2: two or more */

volatile BOOL bHiddenVol = FALSE; /* If true, we are (or will be) creating a hidden volume. */

volatile BOOL bHiddenVolHost = FALSE; /* If true, we are (or will be) creating the host volume (called "outer") for a hidden volume. */

volatile BOOL bHiddenVolDirect = FALSE; /* If true, the wizard omits creating a host volume in the course of the process of hidden volume creation. */

volatile BOOL bHiddenVolFinished = FALSE;

int hiddenVolHostDriveNo = -1; /* Drive letter for the volume intended to host a hidden volume. */

BOOL bRemovableHostDevice = FALSE; /* TRUE when creating a device/partition-hosted volume on a removable device. State undefined when creating file-hosted volumes. */

int realClusterSize; /* Parameter used when determining the maximum possible size of a hidden volume. */

int hash_algo = DEFAULT_HASH_ALGORITHM; /* Which PRF to use in header key derivation (PKCS #5) and in the RNG. */

unsigned __int64 nUIVolumeSize = 0; /* The volume size. Important: This value is not in bytes. It has to be multiplied by nMultiplier. Do not use this value when actually creating the volume (it may chop off sector size, if it is not a multiple of 1024 bytes). */

unsigned __int64 nVolumeSize = 0; /* The volume size, in bytes. */

unsigned __int64 nHiddenVolHostSize = 0; /* Size of the hidden volume host, in bytes */

__int64 nMaximumHiddenVolSize = 0; /* Maximum possible size of the hidden volume, in bytes */

__int64 nbrFreeClusters = 0;

__int64 nMultiplier = BYTES_PER_MB; /* Size selection multiplier. */

wchar_t szFileName[TC_MAX_PATH+1]; /* The file selected by the user */

wchar_t szDiskFile[TC_MAX_PATH+1]; /* Fully qualified name derived from szFileName */

volatile BOOL bVolTransformThreadCancel = FALSE; /* TRUE if the user cancels/pauses volume encryption/format */

volatile BOOL bVolTransformThreadRunning = FALSE; /* Is the volume encryption/format thread running */

volatile BOOL bVolTransformThreadToRun = FALSE; /* TRUE if the Format/Encrypt button has been clicked and we are proceeding towards launching the thread. */

volatile BOOL bConfirmQuit = FALSE; /* If TRUE, the user is asked to confirm exit when he clicks the X icon, Exit, etc. */

volatile BOOL bConfirmQuitSysEncPretest = FALSE;

BOOL bDevice = FALSE; /* Is this a partition volume ? */

BOOL showKeys = FALSE;

volatile HWND hMasterKey = NULL; /* Text box showing hex dump of the master key */

volatile HWND hHeaderKey = NULL; /* Text box showing hex dump of the header key */

volatile HWND hRandPool = NULL; /* Text box showing hex dump of the random pool */

volatile HWND hRandPoolSys = NULL; /* Text box showing hex dump of the random pool for system encryption */

volatile HWND hPasswordInputField = NULL; /* Password input field */

volatile HWND hVerifyPasswordInputField = NULL; /* Verify-password input field */

HBITMAP hbmWizardBitmapRescaled = NULL;

wchar_t OrigKeyboardLayout [8+1] = L"00000409";

BOOL bKeyboardLayoutChanged = FALSE; /* TRUE if the keyboard layout was changed to the standard US keyboard layout (from any other layout). */

BOOL bKeybLayoutAltKeyWarningShown = FALSE; /* TRUE if the user has been informed that it is not possible to type characters by pressing keys while the right Alt key is held down. */

#ifndef _DEBUG

BOOL bWarnDeviceFormatAdvanced = TRUE;

#else

BOOL bWarnDeviceFormatAdvanced = FALSE;

#endif

BOOL bWarnOuterVolSuitableFileSys = TRUE;

Password volumePassword; /* User password */

Password outerVolumePassword; /* Outer volume user password */

char szVerify[MAX_PASSWORD + 1]; /* Tmp password buffer */

char szRawPassword[MAX_PASSWORD + 1]; /* Password before keyfile was applied to it */

int volumePim = 0;

int outerVolumePim = 0;

BOOL bHistoryCmdLine = FALSE; /* History control is always disabled */

BOOL ComServerMode = FALSE;

Password CmdVolumePassword = {0}; /* Password passed from command line */

int CmdVolumeEA = 0;

int CmdVolumePkcs5 = 0;

int CmdVolumePim = 0;

int CmdVolumeFilesystem = FILESYS_NONE;

unsigned __int64 CmdVolumeFileSize = 0;

BOOL CmdSparseFileSwitch = FALSE;

BOOL CmdQuickFormat = FALSE;

BOOL CmdFastCreateFile = FALSE;

BOOL bForceOperation = FALSE;

BOOL bOperationSuccess = FALSE;

BOOL bGuiMode = TRUE;

BOOL bSystemIsGPT = FALSE;

KeyFile *FirstCmdKeyFile = NULL;

int nPbar = 0; /* Control ID of progress bar:- for format code */

wchar_t HeaderKeyGUIView [KEY_GUI_VIEW_SIZE];

wchar_t MasterKeyGUIView [KEY_GUI_VIEW_SIZE];

#define RANDPOOL_DISPLAY_COLUMNS 15

#define RANDPOOL_DISPLAY_ROWS 8

#define RANDPOOL_DISPLAY_BYTE_PORTION (RANDPOOL_DISPLAY_COLUMNS * RANDPOOL_DISPLAY_ROWS)

#define RANDPOOL_DISPLAY_SIZE (RANDPOOL_DISPLAY_BYTE_PORTION * 3 + RANDPOOL_DISPLAY_ROWS + 2)

unsigned char randPool [RANDPOOL_DISPLAY_BYTE_PORTION];

unsigned char lastRandPool [RANDPOOL_DISPLAY_BYTE_PORTION];

static unsigned char maskRandPool [RANDPOOL_DISPLAY_BYTE_PORTION];

static BOOL bUseMask = FALSE;

static DWORD mouseEntropyGathered = 0xFFFFFFFF;

static DWORD mouseEventsInitialCount = 0;

/* max value of entropy needed to fill all random pool = 8 * RNG_POOL_SIZE = 2560 bits */

static const DWORD maxEntropyLevel = RNG_POOL_SIZE * 8;

static HWND hEntropyBar = NULL;

wchar_t outRandPoolDispBuffer [RANDPOOL_DISPLAY_SIZE];

BOOL bDisplayPoolContents = TRUE;

volatile BOOL bSparseFileSwitch = FALSE;

volatile BOOL quickFormat = FALSE;

volatile BOOL fastCreateFile = FALSE;

volatile BOOL dynamicFormat = FALSE; /* this variable represents the sparse file flag. */

volatile int fileSystem = FILESYS_NONE;

volatile int clusterSize = 0;

SYSENC_MULTIBOOT_CFG SysEncMultiBootCfg;

wchar_t SysEncMultiBootCfgOutcome [4096] = {L'N',L'/',L'A',0};

volatile int NonSysInplaceEncStatus = NONSYS_INPLACE_ENC_STATUS_NONE;

LONGLONG nAvailableFreeSpace = -1;

BOOL bIsSparseFilesSupportedByHost = FALSE;

vector <HostDevice> DeferredNonSysInPlaceEncDevices;

int iMaxPasswordLength = MAX_PASSWORD;

// specific definitions and implementation for support of resume operation

// in wait dialog mechanism

void CALLBACK ResumeInPlaceEncWaitThreadProc(void* pArg, HWND hwndDlg)

{

wchar_t szDevicePath[MAX_PATH] = {0};

RawDevicesDlgParam param;

param.devices = GetAvailableHostDevices (false, true, false);

param.pszFileName = szDevicePath;

DeferredNonSysInPlaceEncDevices.clear();

if ((IDOK == DialogBoxParamW (hInst,

MAKEINTRESOURCEW (IDD_RAWDEVICES_DLG), hwndDlg,

(DLGPROC) RawDevicesDlgProc, (LPARAM) &param)) && wcslen(szDevicePath))

{

foreach (const HostDevice &device, param.devices)

{

if (device.Path == szDevicePath)

{

OpenVolumeContext volume;

int status = OpenVolume (&volume, device.Path.c_str(), &volumePassword, hash_algo, volumePim, FALSE, FALSE, FALSE, TRUE);

if ( status == ERR_SUCCESS)

{

if ((volume.CryptoInfo->HeaderFlags & TC_HEADER_FLAG_NONSYS_INPLACE_ENC) != 0

&& volume.CryptoInfo->EncryptedAreaLength.Value != volume.CryptoInfo->VolumeSize.Value)

{

DeferredNonSysInPlaceEncDevices.push_back (device);

}

else if (volume.CryptoInfo->EncryptedAreaLength.Value == volume.CryptoInfo->VolumeSize.Value)

{

WCHAR szMsg[1024];

e.Show (MainDlg);

return FALSE;

}

return TRUE;

}

else

return FALSE;

}

// Returns 0 if there's an error.

__int64 GetSystemPartitionSize (void)

{

try

{

return BootEncObj->GetSystemDriveConfiguration().SystemPartition.Info.PartitionLength.QuadPart;

}

catch (Exception &e)

{

e.Show (MainDlg);

return 0;

}

}

void ComboSelChangeEA (HWND hwndDlg)

{

int nIndex = (int) SendMessage (GetDlgItem (hwndDlg, IDC_COMBO_BOX), CB_GETCURSEL, 0, 0);

if (nIndex == CB_ERR)

{

SetWindowText (GetDlgItem (hwndDlg, IDC_BOX_HELP), L"");

}

else

{

wchar_t name[100];

nIndex = (int) SendMessage (GetDlgItem (hwndDlg, IDC_COMBO_BOX), CB_GETITEMDATA, nIndex, 0);

EAGetName (name, ARRAYSIZE(name),nIndex, 0);

}

}

static void VerifySizeAndUpdate (HWND hwndDlg, BOOL bUpdate)

{

BOOL bEnable = TRUE;

wchar_t szTmp[50];

__int64 lTmp;

__int64 i;

static unsigned __int64 nLastVolumeSize = 0;

GetWindowText (GetDlgItem (hwndDlg, IDC_SIZEBOX), szTmp, ARRAYSIZE (szTmp));

for (i = 0; i < (__int64) wcslen (szTmp); i++)

{

if (szTmp[i] >= L'0' && szTmp[i] <= L'9')

continue;

else

{

bEnable = FALSE;

break;

}

}

if (IsButtonChecked (GetDlgItem (hwndDlg, IDC_KB)))

nMultiplier = BYTES_PER_KB;

else if (IsButtonChecked (GetDlgItem (hwndDlg, IDC_MB)))

nMultiplier = BYTES_PER_MB;

else if (IsButtonChecked (GetDlgItem (hwndDlg, IDC_GB)))

nMultiplier = BYTES_PER_GB;

else

nMultiplier = BYTES_PER_TB;

if (bDevice && !(bHiddenVol && !bHiddenVolHost)) // If raw device but not a hidden volume

{

PimValueChangedWarning = FALSE;

LocalizeDialog (hwndDlg, "IDD_VOL_CREATION_WIZARD_DLG");

burn (randPool, sizeof(randPool));

burn (lastRandPool, sizeof(lastRandPool));

burn (maskRandPool, sizeof (maskRandPool));

UpdateLastDialogId ();

switch (nCurPageNo)

{

case INTRO_PAGE:

SendMessage (GetDlgItem (hwndDlg, IDC_FILE_CONTAINER), WM_SETFONT, (WPARAM) hUserBoldFont, (LPARAM) TRUE);

SendMessage (GetDlgItem (hwndDlg, IDC_NONSYS_DEVICE), WM_SETFONT, (WPARAM) hUserBoldFont, (LPARAM) TRUE);

SendMessage (GetDlgItem (hwndDlg, IDC_SYS_DEVICE), WM_SETFONT, (WPARAM) hUserBoldFont, (LPARAM) TRUE);

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("INTRO_TITLE"));

ToHyperlink (hwndDlg, IDC_MORE_INFO_ON_CONTAINERS);

ToHyperlink (hwndDlg, IDC_MORE_INFO_ON_SYS_ENCRYPTION);

EnableWindow (GetDlgItem (hwndDlg, IDC_STD_VOL), TRUE);

EnableWindow (GetDlgItem (hwndDlg, IDC_HIDDEN_VOL), TRUE);

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDCANCEL), GetString ("CANCEL"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), FALSE);

UpdateWizardModeControls (hwndDlg, WizardMode);

break;

case SYSENC_TYPE_PAGE:

bHiddenVolHost = bHiddenVol = bHiddenOS;

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), !bDirectSysEncMode);

SetWindowTextW (GetDlgItem (MainDlg, IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (MainDlg, IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (MainDlg, IDCANCEL), GetString ("CANCEL"));

break;

case SYSENC_HIDDEN_OS_REQ_CHECK_PAGE:

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("SYSENC_HIDDEN_OS_REQ_CHECK_PAGE_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("SYSENC_HIDDEN_OS_REQ_CHECK_PAGE_HELP"));

SetWindowTextW (GetDlgItem (MainDlg, IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (MainDlg, IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (MainDlg, IDCANCEL), GetString ("CANCEL"));

EnableWindow (GetDlgItem (MainDlg, IDC_NEXT), TRUE);

EnableWindow (GetDlgItem (MainDlg, IDC_PREV), bDirectSysEncModeCommand != SYSENC_COMMAND_CREATE_HIDDEN_OS && bDirectSysEncModeCommand != SYSENC_COMMAND_CREATE_HIDDEN_OS_ELEV);

ToHyperlink (hwndDlg, IDC_HIDDEN_SYSENC_INFO_LINK);

break;

case SYSENC_SPAN_PAGE:

SendMessage (GetDlgItem (hwndDlg, IDC_WHOLE_SYS_DRIVE), WM_SETFONT, (WPARAM) hUserBoldFont, (LPARAM) TRUE);

SendMessage (GetDlgItem (hwndDlg, IDC_SYS_PARTITION), WM_SETFONT, (WPARAM) hUserBoldFont, (LPARAM) TRUE);

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("SYS_ENCRYPTION_SPAN_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDT_WHOLE_SYS_DRIVE), GetString ("SYS_ENCRYPTION_SPAN_WHOLE_SYS_DRIVE_HELP"));

CheckButton (GetDlgItem (hwndDlg, bWholeSysDrive ? IDC_WHOLE_SYS_DRIVE : IDC_SYS_PARTITION));

DisableIfGpt(GetDlgItem(hwndDlg, IDC_WHOLE_SYS_DRIVE));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDCANCEL), GetString ("CANCEL"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

break;

case SYSENC_PRE_DRIVE_ANALYSIS_PAGE:

Init2RadButtonPageYesNo (SysEncDetectHiddenSectors);

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("SYSENC_PRE_DRIVE_ANALYSIS_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("SYSENC_PRE_DRIVE_ANALYSIS_HELP"));

break;

case SYSENC_DRIVE_ANALYSIS_PAGE:

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("SYSENC_DRIVE_ANALYSIS_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDT_SYSENC_DRIVE_ANALYSIS_INFO), GetString ("SYSENC_DRIVE_ANALYSIS_INFO"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDCANCEL), GetString ("CANCEL"));

EnableWindow (GetDlgItem (MainDlg, IDC_NEXT), FALSE);

EnableWindow (GetDlgItem (MainDlg, IDC_PREV), FALSE);

EnableWindow (GetDlgItem (MainDlg, IDCANCEL), FALSE);

LoadSettings (hwndDlg);

if (HiddenSectorDetectionStatus == 1)

{

// Detection of hidden sectors was already in progress but it did not finish successfully.

// Ask the user if he wants to try again (to prevent repeated system freezing, etc.)

char *tmpStr[] = {0, "HIDDEN_SECTOR_DETECTION_FAILED_PREVIOUSLY", "SKIP_HIDDEN_SECTOR_DETECTION", "RETRY_HIDDEN_SECTOR_DETECTION", "IDC_EXIT", 0};

switch (AskMultiChoice ((void **) tmpStr, FALSE, MainDlg))

{

case 1:

// Do not try again

LoadPage (MainDlg, SYSENC_DRIVE_ANALYSIS_PAGE + 1);

return 0;

case 2:

hPasswordInputField = GetDlgItem (hwndDlg, IDC_PASSWORD_DIRECT);

hVerifyPasswordInputField = NULL;

ToNormalPwdField (hwndDlg, IDC_PASSWORD_DIRECT);

SetPassword (hwndDlg, IDC_PASSWORD_DIRECT, szRawPassword);

SetFocus (GetDlgItem (hwndDlg, IDC_PASSWORD_DIRECT));

SendMessage (GetDlgItem (hwndDlg, IDC_PIM), EM_LIMITTEXT, MAX_PIM, 0);

SetPim (hwndDlg, IDC_PIM, volumePim);

ShowWindow (GetDlgItem( hwndDlg, IDC_PIM_ENABLE), PimEnable? SW_HIDE : SW_SHOW);

ShowWindow (GetDlgItem( hwndDlg, IDT_PIM), PimEnable? SW_SHOW : SW_HIDE);

ShowWindow (GetDlgItem( hwndDlg, IDC_PIM), PimEnable? SW_SHOW : SW_HIDE);

ShowWindow (GetDlgItem( hwndDlg, IDC_PIM_HELP), PimEnable? SW_SHOW : SW_HIDE);

SetCheckBox (hwndDlg, IDC_KEYFILES_ENABLE, KeyFilesEnable);

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString (bInPlaceEncNonSys ? (bInPlaceEncNonSysResumed ? "NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE_HELP" : "NONSYS_INPLACE_DEC_PASSWORD_PAGE_HELP") : "PASSWORD_HIDDENVOL_HOST_DIRECT_HELP"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString (bInPlaceEncNonSys ? "PASSWORD" : "PASSWORD_HIDVOL_HOST_TITLE"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), !bInPlaceEncNonSys);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

}

break;

case PASSWORD_PAGE:

{

wchar_t str[1000];

hPasswordInputField = GetDlgItem (hwndDlg, IDC_PASSWORD);

hVerifyPasswordInputField = GetDlgItem (hwndDlg, IDC_VERIFY);

ToNormalPwdField (hwndDlg, IDC_PASSWORD);

ToNormalPwdField (hwndDlg, IDC_VERIFY);

if (SysEncInEffect ())

{

ToBootPwdField (hwndDlg, IDC_PASSWORD);

ToBootPwdField (hwndDlg, IDC_VERIFY);

{

if (keybLayout != 0x00000409 && keybLayout != 0x04090409)

{

return 1;

}

bKeyboardLayoutChanged = TRUE;

}

if (SetTimer (MainDlg, TIMER_ID_KEYB_LAYOUT_GUARD, TIMER_INTERVAL_KEYB_LAYOUT_GUARD, NULL) == 0)

{

Error ("CANNOT_SET_TIMER", MainDlg);

EndMainDlg (MainDlg);

return 1;

}

}

if (bHiddenVolHost)

{

StringCbCopyW (str, sizeof(str), GetString (bHiddenOS ? "PASSWORD_SYSENC_OUTERVOL_HELP" : "PASSWORD_HIDDENVOL_HOST_HELP"));

}

else if (bHiddenVol)

{

StringCbPrintfW (str, sizeof str, L"%s%s",

GetString (bHiddenOS ? "PASSWORD_HIDDEN_OS_HELP" : "PASSWORD_HIDDENVOL_HELP"),

GetString ("PASSWORD_HELP"));

}

else

{

}

SetFocus (GetDlgItem (hwndDlg, IDC_PASSWORD));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), str);

if (CreatingHiddenSysVol())

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("PASSWORD_HIDDEN_OS_TITLE"));

else if (bHiddenVol)

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString (bHiddenVolHost ? "PASSWORD_HIDVOL_HOST_TITLE" : "PASSWORD_HIDVOL_TITLE"));

else if (WizardMode == WIZARD_MODE_SYS_DEVICE)

else

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("PASSWORD_TITLE"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

VerifyPasswordAndUpdate (hwndDlg, GetDlgItem (GetParent (hwndDlg), IDC_NEXT),

GetDlgItem (hwndDlg, IDC_PASSWORD),

GetDlgItem (hwndDlg, IDC_VERIFY),

NULL,

NULL,

KeyFilesEnable && FirstKeyFile!=NULL && !SysEncInEffect());

volumePassword.Length = (unsigned __int32) strlen ((char *) volumePassword.Text);

}

break;

case PIM_PAGE:

{

SendMessage (GetDlgItem (hwndDlg, IDC_PIM), EM_LIMITTEXT, SysEncInEffect()? MAX_BOOT_PIM: MAX_PIM, 0);

if (volumePim > 0)

{

SetPim (hwndDlg, IDC_PIM, volumePim);

PimValueChangedWarning = TRUE;

SetDlgItemTextW (hwndDlg, IDC_PIM_HELP, GetString (SysEncInEffect ()? "PIM_SYSENC_CHANGE_WARNING" : "PIM_CHANGE_WARNING"));

}

SetFocus (GetDlgItem (hwndDlg, IDC_PIM));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString (SysEncInEffect () && hash_algo != SHA512 && hash_algo != WHIRLPOOL? "PIM_SYSENC_HELP" : "PIM_HELP"));

ToHyperlink (hwndDlg, IDC_LINK_PIM_INFO);

if (CreatingHiddenSysVol())

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("PIM_HIDDEN_OS_TITLE"));

else if (bHiddenVol)

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString (bHiddenVolHost ? "PIM_HIDVOL_HOST_TITLE" : "PIM_HIDVOL_TITLE"));

else if (WizardMode == WIZARD_MODE_SYS_DEVICE)

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("PIM"));

else

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("PIM_TITLE"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

}

SendMessage (GetDlgItem (hwndDlg, IDC_SYS_POOL_CONTENTS), WM_SETFONT, (WPARAM) hFixedDigitFont, (LPARAM) TRUE);

SendMessage (GetDlgItem (hwndDlg, IDC_DISPLAY_POOL_CONTENTS), BM_SETCHECK, showKeys ? BST_CHECKED : BST_UNCHECKED, 0);

DisplayRandPool (hwndDlg, hRandPoolSys, showKeys);

break;

case SYSENC_KEYS_GEN_PAGE:

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("KEYS_GEN_TITLE"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

hMasterKey = GetDlgItem (hwndDlg, IDC_DISK_KEY);

hHeaderKey = GetDlgItem (hwndDlg, IDC_HEADER_KEY);

SendMessage (GetDlgItem (hwndDlg, IDC_DISK_KEY), WM_SETFONT, (WPARAM) hFixedDigitFont, (LPARAM) TRUE);

SendMessage (GetDlgItem (hwndDlg, IDC_HEADER_KEY), WM_SETFONT, (WPARAM) hFixedDigitFont, (LPARAM) TRUE);

SendMessage (GetDlgItem (hwndDlg, IDC_DISPLAY_KEYS), BM_SETCHECK, showKeys ? BST_CHECKED : BST_UNCHECKED, 0);

DisplayPortionsOfKeys (hHeaderKey, hMasterKey, HeaderKeyGUIView, MasterKeyGUIView, !showKeys);

break;

case SYSENC_RESCUE_DISK_CREATION_PAGE:

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("RESCUE_DISK"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (hwndDlg, IDT_RESCUE_DISK_INFO), bSystemIsGPT? GetString ("RESCUE_DISK_EFI_INFO"): GetString ("RESCUE_DISK_INFO"));

SetCheckBox (hwndDlg, IDC_SKIP_RESCUE_VERIFICATION, bDontVerifyRescueDisk);

SetDlgItemText (hwndDlg, IDC_RESCUE_DISK_ISO_PATH, szRescueDiskISO);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), (GetWindowTextLength (GetDlgItem (hwndDlg, IDC_RESCUE_DISK_ISO_PATH)) > 1));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

break;

case SYSENC_RESCUE_DISK_BURN_PAGE:

{

wchar_t szTmp[8192];

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString (bDontVerifyRescueDisk ? "RESCUE_DISK_CREATED_TITLE" : "RESCUE_DISK_RECORDING_TITLE"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

if (bSystemIsGPT)

{

StringCbPrintfW (szTmp, sizeof szTmp,

GetString (bDontVerifyRescueDisk ? "RESCUE_DISK_EFI_EXTRACT_INFO_NO_CHECK" : "RESCUE_DISK_EFI_EXTRACT_INFO"),

szRescueDiskISO, GetString ("RESCUE_DISK_EFI_EXTRACT_INFO_NOTE"));

}

else

{

StringCbPrintfW (szTmp, sizeof szTmp,

GetString (bDontVerifyRescueDisk ? "RESCUE_DISK_BURN_INFO_NO_CHECK" : "RESCUE_DISK_BURN_INFO"),

szRescueDiskISO, IsWindowsIsoBurnerAvailable() ? L"" : GetString ("RESCUE_DISK_BURN_INFO_NONWIN_ISO_BURNER"));

}

SetWindowTextW (GetDlgItem (hwndDlg, IDT_RESCUE_DISK_BURN_INFO), szTmp);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

}

break;

case SYSENC_RESCUE_DISK_VERIFIED_PAGE:

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("RESCUE_DISK_DISK_VERIFIED_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("RESCUE_DISK_VERIFIED_INFO"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("NEXT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

// Rescue Disk has been verified, no need to go back

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), FALSE);

// Prevent losing the burned rescue disk by inadvertent exit

bConfirmQuit = TRUE;

break;

case SYSENC_WIPE_MODE_PAGE:

case NONSYS_INPLACE_ENC_WIPE_MODE_PAGE:

{

}

break;

case SYSENC_PRETEST_INFO_PAGE:

if (bHiddenOS)

{

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("HIDDEN_OS_CREATION_PREINFO_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("HIDDEN_OS_CREATION_PREINFO_HELP"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("START"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), FALSE);

}

else

{

wchar_t finalMsg[8024] = {0};

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("SYS_ENCRYPTION_PRETEST_TITLE"));

try

{

StringCbPrintfW (finalMsg, sizeof(finalMsg),

GetString ("SYS_ENCRYPTION_PRETEST_INFO"),

}

catch (Exception &e)

{

e.Show (hwndDlg);

EndMainDlg (MainDlg);

return 0;

}

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), finalMsg);

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("TEST"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

}

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

break;

case SYSENC_PRETEST_RESULT_PAGE:

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("SYS_ENCRYPTION_PRETEST_RESULT_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("SYS_ENCRYPTION_PRETEST_RESULT_INFO"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("ENCRYPT"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDCANCEL), GetString ("DEFER"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDCANCEL), TRUE);

break;

case SYSENC_ENCRYPTION_PAGE:

if (CreateSysEncMutex ())

{

try

{

BootEncStatus = BootEncObj->GetStatus();

bSystemEncryptionInProgress = BootEncStatus.SetupInProgress;

}

catch (Exception &e)

{

e.Show (hwndDlg);

Error ("ERR_GETTING_SYSTEM_ENCRYPTION_STATUS", MainDlg);

EndMainDlg (MainDlg);

return 0;

}

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE),

GetString (SystemEncryptionStatus != SYSENC_STATUS_DECRYPTING ? "ENCRYPTION" : "DECRYPTION"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDCANCEL), GetString ("DEFER"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_PREV), GetString ("PREV"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT),

GetString (SystemEncryptionStatus != SYSENC_STATUS_DECRYPTING ? "ENCRYPT" : "DECRYPT"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_PAUSE),

GetString (bSystemEncryptionInProgress ? "IDC_PAUSE" : "RESUME"));

EnableWindow (GetDlgItem (hwndDlg, IDC_PAUSE), BootEncStatus.DriveEncrypted);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), FALSE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), !BootEncStatus.SetupInProgress);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDCANCEL), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDHELP), TRUE);

if (SystemEncryptionStatus == SYSENC_STATUS_DECRYPTING)

{

nWipeMode = TC_WIPE_NONE;

EnableWindow (GetDlgItem (hwndDlg, IDC_WIPE_MODE), FALSE);

EnableWindow (GetDlgItem (hwndDlg, IDT_WIPE_MODE), FALSE);

PopulateWipeModeCombo (GetDlgItem (hwndDlg, IDC_WIPE_MODE), TRUE, TRUE, FALSE);

SelectAlgo (GetDlgItem (hwndDlg, IDC_WIPE_MODE), (int *) &nWipeMode);

}

else

{

EnableWindow (GetDlgItem (hwndDlg, IDC_WIPE_MODE), !bSystemEncryptionInProgress);

PopulateWipeModeCombo (GetDlgItem (hwndDlg, IDC_WIPE_MODE), FALSE, TRUE, FALSE);

SelectAlgo (GetDlgItem (hwndDlg, IDC_WIPE_MODE), (int *) &nWipeMode);

}

PostMessage (hwndDlg, TC_APPMSG_PERFORM_POST_SYSENC_WMINIT_TASKS, 0, 0);

}

else

{

Error ("SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE", MainDlg);

EndMainDlg (MainDlg);

return 0;

}

return 0;

case NONSYS_INPLACE_ENC_RESUME_PARTITION_SEL_PAGE:

{

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("FILE_TITLE"));

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("NONSYS_INPLACE_ENC_RESUME_VOL_SELECT_HELP"));

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), FALSE);

foreach (const HostDevice &device, DeferredNonSysInPlaceEncDevices)

{

SendMessage (GetDlgItem (hwndDlg, IDC_LIST_BOX), LB_ADDSTRING, 0, (LPARAM) device.Path.c_str());

}

// Deselect all

SendMessage (GetDlgItem (hwndDlg, IDC_LIST_BOX), LB_SETCURSEL, (WPARAM) -1, 0);

}

break;

case NONSYS_INPLACE_ENC_TRANSFORM_PAGE:

if (bInPlaceEncNonSysResumed)

{

WipeAlgorithmId savedWipeAlgorithm = TC_WIPE_NONE;

if (bHiddenOS && IsHiddenOSRunning())

{

// Decoy system partition wipe

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("DEVICE_WIPE_PAGE_INFO_HIDDEN_OS"));

}

else

{

// Regular device wipe (not decoy system partition wipe)

SetWindowTextW (GetDlgItem (hwndDlg, IDC_BOX_HELP), GetString ("DEVICE_WIPE_PAGE_INFO"));

}

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_BOX_TITLE), GetString ("DEVICE_WIPE_PAGE_TITLE"));

SetWindowTextW (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), GetString ("WIPE"));

SetWindowTextW (GetDlgItem (hCurPage, IDC_WIPE_MODE), (wstring (L" ") + GetWipeModeName (nWipeMode)).c_str());

EnableWindow (GetDlgItem (hwndDlg, IDC_ABORT_BUTTON), FALSE);

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_PREV), TRUE);

break;

}

return 0;

case WM_HELP:

OpenPageHelp (GetParent (hwndDlg), nCurPageNo);

return 1;

case TC_APPMSG_PERFORM_POST_SYSENC_WMINIT_TASKS:

AfterSysEncProgressWMInitTasks (hwndDlg);

return 1;

case WM_CTLCOLORSTATIC:

{

if (PimValueChangedWarning && ((HWND)lParam == GetDlgItem(hwndDlg, IDC_PIM_HELP)) )

{

// we're about to draw the static

// set the text colour in (HDC)lParam

SetBkMode((HDC)wParam,TRANSPARENT);

SetTextColor((HDC)wParam, RGB(255,0,0));

// NOTE: per documentation as pointed out by selbie, GetSolidBrush would leak a GDI handle.

return (BOOL)GetSysColorBrush(COLOR_MENU);

}

}

return 0;

case WM_COMMAND:

if (nCurPageNo == INTRO_PAGE)

{

switch (lw)

{

case IDC_FILE_CONTAINER:

UpdateWizardModeControls (hwndDlg, WIZARD_MODE_FILE_CONTAINER);

return 1;

case IDC_NONSYS_DEVICE:

UpdateWizardModeControls (hwndDlg, WIZARD_MODE_NONSYS_DEVICE);

return 1;

case IDC_SYS_DEVICE:

UpdateWizardModeControls (hwndDlg, WIZARD_MODE_SYS_DEVICE);

return 1;

case IDC_MORE_INFO_ON_CONTAINERS:

Applink ("introcontainer");

return 1;

case IDC_MORE_INFO_ON_SYS_ENCRYPTION:

Applink ("introsysenc");

return 1;

}

}

if (nCurPageNo == SYSENC_TYPE_PAGE)

{

switch (lw)

{

case IDC_SYSENC_HIDDEN:

bHiddenOS = TRUE;

bHiddenVol = TRUE;

bHiddenVolHost = TRUE;

return 1;

case IDC_SYSENC_NORMAL:

bHiddenOS = FALSE;

bHiddenVol = FALSE;

bHiddenVolHost = FALSE;

return 1;

case IDC_HIDDEN_SYSENC_INFO_LINK:

Applink ("hiddensysenc");

return 1;

}

}

if (nCurPageNo == SYSENC_HIDDEN_OS_REQ_CHECK_PAGE && lw == IDC_HIDDEN_SYSENC_INFO_LINK)

{

Applink ("hiddensysenc");

return 1;

}

if (nCurPageNo == SYSENC_SPAN_PAGE)

{

switch (lw)

{

case IDC_WHOLE_SYS_DRIVE:

bWholeSysDrive = TRUE;

return 1;

case IDC_SYS_PARTITION:

bWholeSysDrive = FALSE;

return 1;

}

}

if (nCurPageNo == SYSENC_MULTI_BOOT_MODE_PAGE)

{

switch (lw)

{

case IDC_SINGLE_BOOT:

nMultiBoot = 1;

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

return 1;

case IDC_MULTI_BOOT:

nMultiBoot = 2;

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

return 1;

}

}

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT),

bValidEntry);

bDeviceTransformModeChoiceMade = FALSE;

bInPlaceEncNonSys = FALSE;

return 1;

}

if (hw == CBN_SELCHANGE && nCurPageNo == VOLUME_LOCATION_PAGE)

{

LPARAM nIndex;

nIndex = MoveEditToCombo ((HWND) lParam, bHistory);

nIndex = UpdateComboOrder (GetDlgItem (hwndDlg, IDC_COMBO_BOX));

if (nIndex != CB_ERR)

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), TRUE);

else

EnableWindow (GetDlgItem (GetParent (hwndDlg), IDC_NEXT), FALSE);

bDeviceTransformModeChoiceMade = FALSE;

bInPlaceEncNonSys = FALSE;

return 1;

}

if (hw == EN_CHANGE && nCurPageNo == SIZE_PAGE)

{

VerifySizeAndUpdate (hwndDlg, FALSE);

return 1;

}

if (hw == EN_CHANGE && nCurPageNo == PASSWORD_PAGE)

{

volumePassword.Length = (unsigned __int32) strlen ((char *) volumePassword.Text);

return 1;

}

if (hw == EN_CHANGE && nCurPageNo == PIM_PAGE)

{

if (lw == IDC_PIM)

{

if(GetPim (hwndDlg, IDC_PIM, 0) != 0)

{

PimValueChangedWarning = TRUE;

SetDlgItemTextW (hwndDlg, IDC_PIM_HELP, GetString (SysEncInEffect ()? "PIM_SYSENC_CHANGE_WARNING" : "PIM_CHANGE_WARNING"));

}

else

{

PimValueChangedWarning = FALSE;

SetDlgItemTextW (hwndDlg, IDC_PIM_HELP, (wchar_t *) GetDictionaryValueByInt (IDC_PIM_HELP));

}

}

return 1;

}

if (lw == IDC_SHOW_PASSWORD && nCurPageNo == PASSWORD_PAGE)

{

HandleShowPasswordFieldAction (hwndDlg, IDC_SHOW_PASSWORD, IDC_PASSWORD, IDC_VERIFY);

return 1;

}

if (lw == IDC_SHOW_PIM && nCurPageNo == PIM_PAGE)

{

HandleShowPasswordFieldAction (hwndDlg, IDC_SHOW_PIM, IDC_PIM, 0);

return 1;

}

if (lw == IDC_PIM_ENABLE)

{

PimEnable = GetCheckBox (hwndDlg, IDC_PIM_ENABLE);

if (!PimEnable)

volumePim = 0;

if (nCurPageNo == HIDDEN_VOL_HOST_PASSWORD_PAGE

|| nCurPageNo == NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE

)

{

ShowWindow (GetDlgItem( hwndDlg, IDC_PIM_ENABLE), PimEnable? SW_HIDE : SW_SHOW);

ShowWindow (GetDlgItem( hwndDlg, IDT_PIM), PimEnable? SW_SHOW : SW_HIDE);

ShowWindow (GetDlgItem( hwndDlg, IDC_PIM), PimEnable? SW_SHOW : SW_HIDE);

ShowWindow (GetDlgItem( hwndDlg, IDC_PIM_HELP), PimEnable? SW_SHOW : SW_HIDE);

if (PimEnable)

{

SetFocus (GetDlgItem (hwndDlg, IDC_PIM));

}

}

return 1;

}

if (nCurPageNo == PASSWORD_PAGE

|| nCurPageNo == HIDDEN_VOL_HOST_PASSWORD_PAGE

|| nCurPageNo == NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE)

{

if (lw == IDC_KEY_FILES)

{

if (SysEncInEffect())

{

Warning ("KEYFILES_NOT_SUPPORTED_FOR_SYS_ENCRYPTION", MainDlg);

return 1;

}

KeyFilesDlgParam param;

param.EnableKeyFiles = KeyFilesEnable;

return 1;

}

if (lw == IDC_DISPLAY_KEYS && nCurPageNo == SYSENC_KEYS_GEN_PAGE)

{

showKeys = IsButtonChecked (GetDlgItem (hCurPage, IDC_DISPLAY_KEYS));

DisplayPortionsOfKeys (GetDlgItem (hwndDlg, IDC_HEADER_KEY), GetDlgItem (hwndDlg, IDC_DISK_KEY), HeaderKeyGUIView, MasterKeyGUIView, !showKeys);

return 1;

}

if (nCurPageNo == SYSENC_RESCUE_DISK_CREATION_PAGE)

{

if (lw == IDC_BROWSE)

{

wchar_t tmpszRescueDiskISO [TC_MAX_PATH+1];

if (!BrowseFiles (hwndDlg, "OPEN_TITLE", tmpszRescueDiskISO, FALSE, TRUE, NULL))

return 1;

StringCbCopyW (szRescueDiskISO, sizeof(szRescueDiskISO), tmpszRescueDiskISO);

SetDlgItemText (hwndDlg, IDC_RESCUE_DISK_ISO_PATH, szRescueDiskISO);

EnableWindow (GetDlgItem (MainDlg, IDC_NEXT), (GetWindowTextLength (GetDlgItem (hwndDlg, IDC_RESCUE_DISK_ISO_PATH)) > 1));

return 1;

}

if ( hw == EN_CHANGE )

{

GetDlgItemText (hwndDlg, IDC_RESCUE_DISK_ISO_PATH, szRescueDiskISO, sizeof(szRescueDiskISO));

EnableWindow (GetDlgItem (MainDlg, IDC_NEXT), (GetWindowTextLength (GetDlgItem (hwndDlg, IDC_RESCUE_DISK_ISO_PATH)) > 1));

return 1;

}

}

{

}

if ((nCurPageNo == SYSENC_WIPE_MODE_PAGE

|| nCurPageNo == NONSYS_INPLACE_ENC_WIPE_MODE_PAGE

|| nCurPageNo == DEVICE_WIPE_MODE_PAGE)

&& hw == CBN_SELCHANGE)

{

nWipeMode = (WipeAlgorithmId) SendMessage (GetDlgItem (hCurPage, IDC_WIPE_MODE),

CB_GETITEMDATA,

SendMessage (GetDlgItem (hCurPage, IDC_WIPE_MODE), CB_GETCURSEL, 0, 0),

0);

return 1;

}

if (nCurPageNo == DEVICE_WIPE_PAGE)

{

switch (lw)

{

case IDC_ABORT_BUTTON:

if (AskWarnNoYes ("CONFIRM_WIPE_ABORT", MainDlg) == IDYES)

WipeAbort();

return 1;

}

}

if (lw == IDC_NO_HISTORY)

{

if (!(bHistory = !IsButtonChecked (GetDlgItem (hCurPage, IDC_NO_HISTORY))))

ClearHistory (GetDlgItem (hCurPage, IDC_COMBO_BOX));

return 1;

}

{

// The host file system is FAT32

if (nVolumeSize >= 4 * BYTES_PER_GB)

{

AbortProcess ("VOLUME_TOO_LARGE_FOR_FAT32");

}

}

/* Verify that the volume would not be too large for the operating system */

if (!IsOSAtLeast (WIN_VISTA)

&& nVolumeSize > 2 * BYTES_PER_TB)

{

AbortProcess ("VOLUME_TOO_LARGE_FOR_WINXP");

}

if (volumePassword.Length > 0)

{

// Check password length (check also done for outer volume which is not the case in TrueCrypt).

if (!CheckPasswordLength (NULL, volumePassword.Length, volumePim, FALSE, 0, Silent, Silent))

{

exit (1);

}

}

if (!KeyFilesApply (hwndDlg, &volumePassword, FirstCmdKeyFile, NULL))

{

exit (1);

}

volTransformThreadFunction (hwndDlg);

exit (bOperationSuccess? 0 : 1);

}

SHGetFolderPath (NULL, CSIDL_MYDOCUMENTS, NULL, 0, szRescueDiskISO);

if (IsOSAtLeast (WIN_VISTA))

{

// Availability of in-place encryption (which is pre-selected by default whenever

// possible) makes partition-hosted volume creation safer.

bWarnDeviceFormatAdvanced = FALSE;

}

#ifdef _DEBUG

// For faster testing

StringCchCopyA (szVerify, ARRAYSIZE(szVerify), "q");

StringCchCopyA (szRawPassword, ARRAYSIZE(szRawPassword), "q");

#endif

PasswordEditDropTarget* pTarget = new PasswordEditDropTarget ();

if (pTarget->Register (hwndDlg))

{

SetWindowLongPtr (hwndDlg, DWLP_USER, (LONG_PTR) pTarget);

}

else

delete pTarget;

PostMessage (hwndDlg, TC_APPMSG_PERFORM_POST_WMINIT_TASKS, 0, 0);

}

return 0;

case WM_SYSCOMMAND:

if (lw == IDC_ABOUT)

{

DialogBoxW (hInst, MAKEINTRESOURCEW (IDD_ABOUT_DLG), hwndDlg, (DLGPROC) AboutDlgProc);

return 1;

}

return 0;

case WM_TIMER:

case TIMER_ID_NONSYS_INPLACE_ENC_PROGRESS:

if (bInPlaceEncNonSys)

{

// Non-system in-place encryption

if (!bVolTransformThreadRunning && !bVolTransformThreadToRun)

{

KillTimer (hwndDlg, TIMER_ID_NONSYS_INPLACE_ENC_PROGRESS);

UpdateLastDialogId ();

}

UpdateNonSysInPlaceEncControls ();

}

return 1;

case TIMER_ID_KEYB_LAYOUT_GUARD:

if (SysEncInEffect ())

{

DWORD keybLayout = (DWORD) GetKeyboardLayout (NULL);

/* Watch the keyboard layout */

if (keybLayout != 0x00000409 && keybLayout != 0x04090409)

{

// Keyboard layout is not standard US

WipePasswordsAndKeyfiles (true);

SetPassword (hCurPage, IDC_PASSWORD, szRawPassword);

SetPassword (hCurPage, IDC_VERIFY, szVerify);

keybLayout = (DWORD) LoadKeyboardLayout (L"00000409", KLF_ACTIVATE);

if (keybLayout != 0x00000409 && keybLayout != 0x04090409)

{

KillTimer (hwndDlg, TIMER_ID_KEYB_LAYOUT_GUARD);

Error ("CANT_CHANGE_KEYB_LAYOUT_FOR_SYS_ENCRYPTION", MainDlg);

EndMainDlg (MainDlg);

return 1;

}

bKeyboardLayoutChanged = TRUE;

wchar_t szTmp [4096];

StringCbCopyW (szTmp, sizeof(szTmp), GetString ("KEYB_LAYOUT_CHANGE_PREVENTED"));

StringCbCatW (szTmp, sizeof(szTmp), L"\n\n");

StringCbCatW (szTmp, sizeof(szTmp), GetString ("KEYB_LAYOUT_SYS_ENC_EXPLANATION"));

MessageBoxW (MainDlg, szTmp, lpszTitle, MB_ICONWARNING | MB_SETFOREGROUND | MB_TOPMOST);

{

}

}

}

return 1;

case TIMER_ID_SYSENC_DRIVE_ANALYSIS_PROGRESS:

if (bSysEncDriveAnalysisInProgress)

{

UpdateProgressBarProc (GetTickCount() - SysEncDriveAnalysisStart);

if (GetTickCount() - SysEncDriveAnalysisStart > SYSENC_DRIVE_ANALYSIS_ETA)

{

// It's taking longer than expected -- reinit the progress bar

SysEncDriveAnalysisStart = GetTickCount ();

InitProgressBar (SYSENC_DRIVE_ANALYSIS_ETA, 0, FALSE, FALSE, FALSE, TRUE);

}

ArrowWaitCursor ();

}

else

{

KillTimer (hwndDlg, TIMER_ID_SYSENC_DRIVE_ANALYSIS_PROGRESS);

UpdateProgressBarProc (SYSENC_DRIVE_ANALYSIS_ETA);

Sleep (1500); // User-friendly GUI

if (bSysEncDriveAnalysisTimeOutOccurred)

Warning ("SYS_DRIVE_SIZE_PROBE_TIMEOUT", MainDlg);

LoadPage (hwndDlg, SYSENC_DRIVE_ANALYSIS_PAGE + 1);

}

return 1;

case TIMER_ID_WIPE_PROGRESS:

// Manage device wipe and update related GUI

if (bHiddenOS && IsHiddenOSRunning())

{

// Decoy system partition wipe

}

catch (Exception &e)

{

e.Show (hwndDlg);

}

return 1; // Disallow close

}

else

return 1; // Disallow close

}

else if (bConfirmQuitSysEncPretest)

{

if (AskWarnNoYes (bHiddenOS ? "CONFIRM_CANCEL_HIDDEN_OS_CREATION" : "CONFIRM_CANCEL_SYS_ENC_PRETEST", MainDlg) == IDNO)

return 1; // Disallow close

}

else if (bConfirmQuit)

{

if (AskWarnNoYes ("CONFIRM_EXIT_UNIVERSAL", MainDlg) == IDNO)

return 1; // Disallow close

}

if (hiddenVolHostDriveNo > -1)

{

CloseVolumeExplorerWindows (hwndDlg, hiddenVolHostDriveNo);

UnmountVolume (hwndDlg, hiddenVolHostDriveNo, TRUE);

}

EndMainDlg (hwndDlg);

return 1;

case WM_COMMAND:

if (lw == IDHELP)

{

return 1;

}

else if (lw == IDCANCEL)

{

PostMessage (hwndDlg, TC_APPMSG_FORMAT_USER_QUIT, 0, 0);

return 1;

}

else if (lw == IDC_NEXT)

{

if (nCurPageNo == INTRO_PAGE)

{

switch (GetSelectedWizardMode (hCurPage))

{

case WIZARD_MODE_FILE_CONTAINER:

if (CurrentOSMajor >= 6 && IsUacSupported() && IsAdmin() && !IsBuiltInAdmin() && !IsNonInstallMode())

{

static bool warningConfirmed = false;

if (!warningConfirmed)

{

if (AskWarnYesNo ("CONTAINER_ADMIN_WARNING", MainDlg) == IDYES)

exit (0);

warningConfirmed = true;

}

}

WaitCursor ();

CloseSysEncMutex ();

ChangeWizardMode (WIZARD_MODE_FILE_CONTAINER);

bHiddenOS = FALSE;

bInPlaceEncNonSys = FALSE;

nNewPageNo = VOLUME_TYPE_PAGE - 1; // Skip irrelevant pages

break;

case WIZARD_MODE_NONSYS_DEVICE:

WaitCursor ();

CloseSysEncMutex ();

if (!ChangeWizardMode (WIZARD_MODE_NONSYS_DEVICE))

{

NormalCursor ();

return 1;

}

bHiddenOS = FALSE;

nNewPageNo = VOLUME_TYPE_PAGE - 1; // Skip irrelevant pages

break;

case WIZARD_MODE_SYS_DEVICE:

WaitCursor ();

bHiddenVol = FALSE;

bInPlaceEncNonSys = FALSE;

SwitchWizardToSysEncMode ();

return 1;

}

}

else if (nCurPageNo == SYSENC_TYPE_PAGE)

{

if (bHiddenOS)

{

bWholeSysDrive = FALSE;

bHiddenVolDirect = FALSE;

}

if (!bHiddenOS)

}

else if (nCurPageNo == SYSENC_HIDDEN_OS_REQ_CHECK_PAGE)

{

WaitCursor ();

try

{

BootEncObj->CheckRequirementsHiddenOS ();

if (CheckGapBetweenSysAndHiddenOS ())

Warning ("GAP_BETWEEN_SYS_AND_HIDDEN_OS_PARTITION", MainDlg);

}

catch (Exception &e)

{

e.Show (hwndDlg);

NormalCursor ();

return 1;

}

if (AskWarnYesNo ("DECOY_OS_REINSTALL_WARNING", MainDlg) == IDNO)

{

NormalCursor ();

return 1;

}

WarningDirect ((wstring (GetString ("HIDDEN_OS_WRITE_PROTECTION_BRIEF_INFO"))

+ L"\n\n"

+ GetString ("HIDDEN_OS_WRITE_PROTECTION_EXPLANATION")).c_str(), MainDlg);

if (!IsAdmin() && IsUacSupported())

{

// If UAC elevation is needed, we need to elevate the complete wizard process here, because

// we will need to switch to the non-sys-device mode, which requires the whole wizard process

// to have admin rights.

CloseSysEncMutex ();

// The host file system is FAT32

if (nUIVolumeSize * nMultiplier >= 4 * BYTES_PER_GB)

{

Error ("VOLUME_TOO_LARGE_FOR_FAT32", hwndDlg);

return 1;

}

}

/* Verify that the volume would not be too large for the operating system */

if (!IsOSAtLeast (WIN_VISTA)

&& nUIVolumeSize * nMultiplier > 2 * BYTES_PER_TB)

{

Warning ("VOLUME_TOO_LARGE_FOR_WINXP", hwndDlg);

}

}

if (bHiddenVol && !bHiddenVolHost) // If it's a hidden volume

{

/* Ask for confirmation if the hidden volume is too large for the user to be

able to write much more data to the outer volume. */

if (((double) nUIVolumeSize / (nMaximumHiddenVolSize / nMultiplier)) > 0.85) // 85%

{

if (AskWarnNoYes ("FREE_SPACE_FOR_WRITING_TO_OUTER_VOLUME", hwndDlg) == IDNO)

return 1;

}

}

if (!(bHiddenVolDirect && bHiddenVolHost))

nNewPageNo = PASSWORD_PAGE - 1;

}

else if (nCurPageNo == PASSWORD_PAGE)

{

VerifyPasswordAndUpdate (hwndDlg, GetDlgItem (MainDlg, IDC_NEXT),

GetDlgItem (hCurPage, IDC_PASSWORD),

GetDlgItem (hCurPage, IDC_VERIFY),

volumePassword.Text,

szVerify,

KeyFilesEnable && FirstKeyFile!=NULL && !SysEncInEffect());

volumePassword.Length = (unsigned __int32) strlen ((char *) volumePassword.Text);

if (volumePassword.Length > 0)

{

// Password character encoding

if (SysEncInEffect () && !CheckPasswordCharEncoding (GetDlgItem (hCurPage, IDC_PASSWORD), NULL))

{

Error ("UNSUPPORTED_CHARS_IN_PWD", hwndDlg);

return 1;

}

else if (!CheckPasswordLength (hwndDlg, volumePassword.Length, 0, SysEncInEffect(), SysEncInEffect()? hash_algo : 0, FALSE, FALSE))

{

return 1;

}

}

// Store the password in case we need to restore it after keyfile is applied to it

if (!GetPassword (hCurPage, IDC_PASSWORD, szRawPassword, iMaxPasswordLength + 1, FALSE, TRUE))

return 1;

if (!SysEncInEffect ())

{

if (KeyFilesEnable)

{

WaitCursor ();

if (!KeyFilesApply (hwndDlg, &volumePassword, FirstKeyFile, NULL))

{

NormalCursor ();

return 1;

}

NormalCursor ();

}

}

else

{

KillTimer (hwndDlg, TIMER_ID_KEYB_LAYOUT_GUARD);

if (bKeyboardLayoutChanged)

{

// Restore the original keyboard layout

if (LoadKeyboardLayout (OrigKeyboardLayout, KLF_ACTIVATE | KLF_SUBSTITUTE_OK) == NULL)

Warning ("CANNOT_RESTORE_KEYBOARD_LAYOUT", hwndDlg);

else

bKeyboardLayoutChanged = FALSE;

}

}

if (!PimEnable)

{

// PIM not activated. Skip PIM page

nNewPageNo = PIM_PAGE;

volumePim = 0;

if (!CreatingHiddenSysVol() && bHiddenVol && !bHiddenVolHost)

{

if ( (volumePim == outerVolumePim)

&& (volumePassword.Length == outerVolumePassword.Length)

&& (0 == memcmp (volumePassword.Text, outerVolumePassword.Text, volumePassword.Length))

)

{

Warning ("HIDDEN_CREDS_SAME_AS_OUTER", hwndDlg);

return 1;

}

}

if (bInPlaceEncNonSys)

{

nNewPageNo = NONSYS_INPLACE_ENC_RAND_DATA_PAGE - 1; // Skip irrelevant pages

}

else if (WizardMode != WIZARD_MODE_SYS_DEVICE

&& !FileSize4GBLimitQuestionNeeded ()

|| CreatingHiddenSysVol()) // If we're creating a hidden volume for a hidden OS, we don't need to format it with any filesystem (the entire OS will be copied to the hidden volume sector by sector).

{

nNewPageNo = FORMAT_PAGE - 1; // Skip irrelevant pages

}

}

}

else if (nCurPageNo == PIM_PAGE)

{

volumePim = GetPim (hCurPage, IDC_PIM, 0);

if (!SysEncInEffect() && (volumePim > MAX_PIM_VALUE))

{

SetFocus (GetDlgItem(hCurPage, IDC_PIM));

Error ("PIM_TOO_BIG", hwndDlg);

return 1;

}

if (!CreatingHiddenSysVol() && bHiddenVol && !bHiddenVolHost)

{

if ( (volumePim == outerVolumePim)

&& (volumePassword.Length == outerVolumePassword.Length)

&& (0 == memcmp (volumePassword.Text, outerVolumePassword.Text, volumePassword.Length))

)

{

Warning ("HIDDEN_CREDS_SAME_AS_OUTER", hwndDlg);

return 1;

}

}

if (volumePassword.Length > 0)

{

// Password character encoding

if (SysEncInEffect() && (volumePim > MAX_BOOT_PIM_VALUE))

{

SetFocus (GetDlgItem(hCurPage, IDC_PIM));

Error ("PIM_SYSENC_TOO_BIG", hwndDlg);

return 1;

}

// Check password length (check also done for outer volume which is not the case in TrueCrypt).

{

return 1;

}

}

if (bInPlaceEncNonSys)

{

nNewPageNo = NONSYS_INPLACE_ENC_RAND_DATA_PAGE - 1; // Skip irrelevant pages

}

else if (WizardMode != WIZARD_MODE_SYS_DEVICE

&& !FileSize4GBLimitQuestionNeeded ()

|| CreatingHiddenSysVol()) // If we're creating a hidden volume for a hidden OS, we don't need to format it with any filesystem (the entire OS will be copied to the hidden volume sector by sector).

{

nNewPageNo = FORMAT_PAGE - 1; // Skip irrelevant pages

}

}

else if (nCurPageNo == HIDDEN_VOL_HOST_PASSWORD_PAGE

|| nCurPageNo == NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE)

{

WaitCursor ();

if (!GetPassword (hCurPage, IDC_PASSWORD_DIRECT, (char*) volumePassword.Text, iMaxPasswordLength + 1, FALSE, TRUE))

{

NormalCursor ();

return 1;

}

volumePassword.Length = (unsigned __int32) strlen ((char *) volumePassword.Text);

hash_algo = (int) SendMessage (GetDlgItem (hCurPage, IDC_PKCS5_PRF_ID), CB_GETITEMDATA, SendMessage (GetDlgItem (hCurPage, IDC_PKCS5_PRF_ID), CB_GETCURSEL, 0, 0), 0);

volumePim = GetPim (hCurPage, IDC_PIM, 0);

// Store the password in case we need to restore it after keyfile is applied to it

if (!GetPassword (hCurPage, IDC_PASSWORD_DIRECT, szRawPassword, iMaxPasswordLength + 1, FALSE, TRUE))

{

NormalCursor ();

return 1;

}

if (KeyFilesEnable)

{

KeyFilesApply (hwndDlg, &volumePassword, FirstKeyFile, NULL);

}

if (!bInPlaceEncNonSys)

{

/* Mount the volume which is to host the new hidden volume as read only */

EnableWindow (GetDlgItem (MainDlg, IDC_NEXT), TRUE);

NormalCursor ();

}

break;

}

break;

}

}

}

}

else if (nCurPageNo == DEVICE_WIPE_PAGE)

{

if (AskWarnOkCancel (bHiddenOS && IsHiddenOSRunning() ? "CONFIRM_WIPE_START_DECOY_SYS_PARTITION" : "CONFIRM_WIPE_START", hwndDlg) == IDOK)

{

WipeStart ();

ArrowWaitCursor();

}

return 1;

}

LoadPage (hwndDlg, nNewPageNo + 1);

ovf_end:

return 1;

}

else if (lw == IDC_PREV)

{

if (nCurPageNo == SYSENC_SPAN_PAGE)

{

// Skip irrelevant pages when going back

if (!bHiddenOS)

nNewPageNo = SYSENC_TYPE_PAGE + 1;

}

if (nCurPageNo == SYSENC_MULTI_BOOT_MODE_PAGE)

{

// Skip the drive analysis page(s) or other irrelevant pages when going back

if (bHiddenOS)

nNewPageNo = SYSENC_HIDDEN_OS_REQ_CHECK_PAGE + 1;

else if (bWholeSysDrive)

nNewPageNo = SYSENC_PRE_DRIVE_ANALYSIS_PAGE + 1;

else

nNewPageNo = SYSENC_SPAN_PAGE + 1;

}

else if (nCurPageNo == SYSENC_MULTI_BOOT_NONWIN_BOOT_LOADER_PAGE)

{

if (SysEncMultiBootCfg.NumberOfSysDrives == 1)

{

// We can skip SYSENC_MULTI_BOOT_ADJACENT_SYS_PAGE (it is implied that there are multiple systems on the drive)

nNewPageNo = SYSENC_MULTI_BOOT_NBR_SYS_DRIVES_PAGE + 1;

}

}

else if (nCurPageNo == HIDDEN_VOL_HOST_PRE_CIPHER_PAGE)

{

if (bHiddenOS)

{

if (!ChangeWizardMode (WIZARD_MODE_SYS_DEVICE))

{

NormalCursor ();

return 1;

}

// Skip irrelevant pages.

// Note that we're ignoring nMultiBoot here, as the multi-boot question pages are skipped

// when creating a hidden OS (only a single message box is displayed with requirements).

nNewPageNo = SYSENC_MULTI_BOOT_MODE_PAGE + 1;

}

else

{

else if (nCurPageNo == SIZE_PAGE)

{

VerifySizeAndUpdate (hCurPage, TRUE);

}

else if (nCurPageNo == FILESYS_PAGE)

{

if (nNeedToStoreFilesOver4GB != Get2RadButtonPageAnswer())

fileSystem = FILESYS_NONE; // The user may have gone back and changed the answer, so default file system must be reselected

nNeedToStoreFilesOver4GB = Get2RadButtonPageAnswer();

nNewPageNo = (PimEnable? PIM_PAGE : PASSWORD_PAGE) + 1; // Skip PIM page if it is not enabled

}

else if (nCurPageNo == PASSWORD_PAGE)

{

// Store the password in case we need to restore it after keyfile is applied to it

GetPassword (hCurPage, IDC_PASSWORD, szRawPassword, iMaxPasswordLength + 1, FALSE, FALSE);

VerifyPasswordAndUpdate (hwndDlg, GetDlgItem (MainDlg, IDC_NEXT),

GetDlgItem (hCurPage, IDC_PASSWORD),

GetDlgItem (hCurPage, IDC_VERIFY),

volumePassword.Text,

szVerify,

KeyFilesEnable && FirstKeyFile!=NULL && !SysEncInEffect ());

volumePassword.Length = (unsigned __int32) strlen ((char *) volumePassword.Text);

nNewPageNo = SIZE_PAGE + 1; // Skip the hidden volume host password page

if (SysEncInEffect ())

{

KillTimer (hwndDlg, TIMER_ID_KEYB_LAYOUT_GUARD);

if (bKeyboardLayoutChanged)

{

// Restore the original keyboard layout

if (LoadKeyboardLayout (OrigKeyboardLayout, KLF_ACTIVATE | KLF_SUBSTITUTE_OK) == NULL)

Warning ("CANNOT_RESTORE_KEYBOARD_LAYOUT", hwndDlg);

else

bKeyboardLayoutChanged = FALSE;

}

}

else if (bInPlaceEncNonSys)

nNewPageNo = CIPHER_PAGE + 1;

}

else if (nCurPageNo == PIM_PAGE)

{

volumePim = GetPim (hCurPage, IDC_PIM, 0);

}

else if (nCurPageNo == HIDDEN_VOL_HOST_PASSWORD_PAGE

|| nCurPageNo == NONSYS_INPLACE_ENC_RESUME_PASSWORD_PAGE)

{

// Store the password in case we need to restore it after keyfile is applied to it

GetPassword (hCurPage, IDC_PASSWORD_DIRECT, szRawPassword, iMaxPasswordLength + 1, FALSE, FALSE);

memcpy (volumePassword.Text, szRawPassword, iMaxPasswordLength + 1);

volumePassword.Length = (unsigned __int32) strlen ((char *) volumePassword.Text);

if (!bInPlaceEncNonSys)

nNewPageNo = VOLUME_LOCATION_PAGE + 1;

}

else if (nCurPageNo == SYSENC_COLLECTING_RANDOM_DATA_PAGE

if (status == ERR_OS_ERROR)

handleWin32Error (NULL, SRC_POS);

else

handleError (NULL, status, SRC_POS);

AbortProcess ("NODRIVER");

}

if (!AutoTestAlgorithms())

AbortProcess ("ERR_SELF_TESTS_FAILED");

/* Create the main dialog box */

DialogBoxParamW (hInstance, MAKEINTRESOURCEW (IDD_VOL_CREATION_WIZARD_DLG), NULL, (DLGPROC) MainDialogProc,

(LPARAM)lpszCommandLine);

FinalizeApp ();

return 0;

}

static DWORD GetFormatSectorSize ()

{

if (!bDevice)

return TC_SECTOR_SIZE_FILE_HOSTED_VOLUME;

DISK_GEOMETRY_EX geometry;

if (!GetDriveGeometry (szDiskFile, &geometry))

{

handleWin32Error (MainDlg, SRC_POS);

AbortProcessSilent();

}

return geometry.Geometry.BytesPerSector;

}

void UpdateNonSysInPlaceEncControls (void);

int MountHiddenVolHost ( HWND hwndDlg, wchar_t *volumePath, int *driveNo, Password *password, int pkcs5_prf, int pim, BOOL bReadOnly );

int AnalyzeHiddenVolumeHost (HWND hwndDlg, int *driveNo, __int64 hiddenVolHostSize, int *realClusterSize, __int64 *pnbrFreeClusters);

int ScanVolClusterBitmap ( HWND hwndDlg, int *driveNo, __int64 nbrClusters, __int64 *nbrFreeClusters);

static void WipeStart (void);

static void WipeAbort (void);

static void UpdateWipeProgressBar (void);

static void InitWipeProgressBar (void);

static void UpdateWipeControls (void);

static DWORD GetFormatSectorSize ();

extern BOOL showKeys;

extern volatile HWND hMasterKey;

extern volatile HWND hHeaderKey;

extern volatile BOOL bHiddenVolHost;

extern volatile BOOL bHiddenVolDirect;

extern BOOL bRemovableHostDevice;

extern BOOL bWarnDeviceFormatAdvanced;

extern HWND hCurPage;

extern HWND hProgressBar;

extern volatile BOOL bVolTransformThreadCancel;

extern volatile BOOL bInPlaceEncNonSysResumed;

extern volatile BOOL bFirstNonSysInPlaceEncResumeDone;

extern volatile BOOL bInPlaceEncNonSys;

extern volatile BOOL bInPlaceDecNonSys;

extern __int64 NonSysInplaceEncBytesDone;

extern __int64 NonSysInplaceEncTotalSize;

extern int nPbar;

extern volatile int WizardMode;

extern volatile BOOL bInPlaceEncNonSysResumed;

extern wchar_t HeaderKeyGUIView [KEY_GUI_VIEW_SIZE];

extern wchar_t MasterKeyGUIView [KEY_GUI_VIEW_SIZE];

extern volatile int NonSysInplaceEncStatus;

#ifdef __cplusplus

}

#endif

<File Id="filBE0C2BED7FB2DD3D2FC511AC4D7D385A" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Protection of Hidden Volumes.html" DiskId="1" />

</Component>

<Component Id="cmp493A37205039E2A3A476A1A4F5360EBF" Guid="{3D92A6B0-B03F-4C86-8020-F756FBAADDC8}">

<File Id="filC70F6B9415FAADA8160DB4529D0BE54D" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Protection of Hidden Volumes_Image_027.jpg" DiskId="1" />

</Component>

<Component Id="cmpF36A771DF9B1C4CD8E82C08A6D3D0786" Guid="{C0D77203-5FAC-4052-A490-ABB0346384AF}">

<File Id="filE1423115AD04FF5AEC6F63AA963CB4D6" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Protection of Hidden Volumes_Image_028.jpg" DiskId="1" />

</Component>

<Component Id="cmp63F6A68C5538B45661168554BC3B93D1" Guid="{252A5E82-AD3A-49A7-8185-421735A09DCE}">

<File Id="fil5286E3B666BFB60D10FBA4CF8D8F6925" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Protection of Hidden Volumes_Image_029.jpg" DiskId="1" />

</Component>

<Component Id="cmp0158A6D8BED6391AC7150B6C6AE2A9F9" Guid="{5A0D3271-1439-4E71-B7F6-D645FEC8FD49}">

<File Id="fil2C5151D680BC4575AC607487970F87D8" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Protection of Hidden Volumes_Image_030.jpg" DiskId="1" />

</Component>

<Component Id="cmpDE45667E9E3CD9F800EAC1E02B57AAB7" Guid="{333167EF-38B6-49E2-A24A-04E08F7D87BE}">

<File Id="fil1B03C5F8575364F36A893E5EE4723659" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Protection of Hidden Volumes_Image_031.jpg" DiskId="1" />

</Component>

<Component Id="cmp632453049391BAACDD117A40EC442743" Guid="{75B50C72-2495-4A22-BFDA-5BFE041EB265}">

<File Id="fil37E6C8BC6738BF93446E4F2D13E312EC" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Random Number Generator.html" DiskId="1" />

</Component>

<Component Id="cmpCE16E453CAD75A461B4FEBF451A51B7B" Guid="{E68D3F57-0A30-4492-9088-F2D1B0C7934A}">

<File Id="filC3043FC38C97C7B8038FF12DD7882D85" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Reallocated Sectors.html" DiskId="1" />

</Component>

<Component Id="cmpC741D187A28A87BD33866C9AC09A1298" Guid="{FB850461-6BD1-495F-9C10-19A34CFA0F16}">

<File Id="filFFB70B91C00A69849F9E36950C6606B3" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\References.html" DiskId="1" />

</Component>

<Component Id="cmpB313B00E647A121B2CBE47F3048A18A7" Guid="{5985576D-6F6C-4D96-9B3E-9E0961CF9FAF}">

<File Id="fil2EB5F87C05CCC55D3964D595C85EF19E" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Release Notes.html" DiskId="1" />

</Component>

<Component Id="cmp400428F6494DE58618E3B92539548C39" Guid="{0A1869ED-25F1-4430-97A5-4C6EA8CDA7FC}">

<File Id="filEDEDEF956F04F36B4163989F9AB9285F" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Removable Medium Volume.html" DiskId="1" />

</Component>

<Component Id="cmpFB2313AB16EF2467366ED136C0E61CE6" Guid="{CFEC9559-9F85-46C6-9E98-AEBB573B96FE}">

<File Id="filE496203C4727FDF47F8352CB9722A8C7" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Removing Encryption.html" DiskId="1" />

</Component>

<Component Id="cmpB4C7B1A7A3EC0CB2DE805AC5CC5FC0D7" Guid="{4534E8B2-114E-4173-AE3E-75E0D96EB573}">

<File Id="fil8CFD1CFDCBE261B6F91D9E587F8720C0" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Security Model.html" DiskId="1" />

</Component>

<Component Id="cmp00540BF93A805E0B9996945B61E1BC2F" Guid="{1D5B7A85-87F3-45AF-9C09-BA7E088A835D}">

<File Id="filA7A29851126AC571C090BB0FBEE83CB5" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Security Requirements and Precautions.html" DiskId="1" />

</Component>

<Component Id="cmp4C46C6668AD830D543AFE593D51676B3" Guid="{4CD21E9D-243F-4A58-A535-AA8EF9D2BFD1}">

<File Id="fil440C5158A3CD96689918C976DC917325" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Security Requirements for Hidden Volumes.html" DiskId="1" />

</Component>

<Component Id="cmp6EE914124966E3A0F695359116413DD4" Guid="{724FA79D-49BC-4075-ABF4-0C318AE39855}">

<File Id="filD229058EB41E2E150C0CA4D0EC1DF39B" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Security Tokens &amp; Smart Cards.html" DiskId="1" />

</Component>

<Component Id="cmp28E29B4CA17AB51913B756CD9397EEFE" Guid="{1B9083B9-8E76-44CA-AE3E-0771B1ABA62B}">

<File Id="filC173058120D357E87951F41755A9210B" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Serpent.html" DiskId="1" />

</Component>

<Component Id="cmp5DF24509F284FABC600232197F803DE5" Guid="{120A40CF-E44A-4F4F-9072-93248DABACA2}">

<File Id="fil01F3ACD810057C4A059A5C424E1B79E1" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\SHA-256.html" DiskId="1" />

</Component>

<Component Id="cmp09E31B885345FBEA1F473AF7A10FD88D" Guid="{1B1C80CF-6C3C-4C7D-BE7B-579042701D0F}">

<File Id="fil2E702CC679444D8DDB66A3FBDB32C807" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\SHA-512.html" DiskId="1" />

</Component>

<Component Id="cmpAE05C79A35A43ECCAC995A711DC4D60B" Guid="{151A493F-38A5-4EF1-9740-255B610B4117}">

<File Id="fil167B9CF3B9CD2FA5458778733095F780" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Sharing over Network.html" DiskId="1" />

</Component>

<Component Id="cmpB6D91209A93313D08150643F1738DED8" Guid="{270DF8A0-8859-49F3-BF05-2F155C3CA428}">

<File Id="filF3B75776C2FEC0F4397274BCA02330DB" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Source Code.html" DiskId="1" />

</Component>

<Component Id="cmpDB66E821EC13977824FB1069DF5DAA69" Guid="{D08B0614-2B88-4445-9B47-52BEA0E29E77}">

<File Id="filA67FBF7D25BFBA155A0E4570F404CBEE" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Standard Compliance.html" DiskId="1" />

</Component>

<Component Id="cmp159AB26E32632FC87229090B3AA89BF8" Guid="{B35B4FD4-D82C-47E9-BB2A-5539115F40CC}">

<File Id="filBFED47E502C7539F724D68EAF73A554D" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\Streebog.html" DiskId="1" />

</Component>

<Component Id="cmp5BE3E12343551B853E1B143371CBEBE6" Guid="{5ACC0589-AD8D-4BAC-BD40-201BAD7D07BC}">

<File Id="filA40C816E149FB745F49DAF482DF97F3B" KeyPath="yes" Source="$(sys.CURRENTDIR)\docs\html\en\styles.css" DiskId="1" />

<ComponentRef Id="cmp1E4F8137AD337BEA1B902E6B003AB953" />

<ComponentRef Id="cmp8D35F7D61B2B7DF0EDEAE2E56031E7CB" />

<ComponentRef Id="cmpDE2C66707086A509EABD0F9F6E8BDB1A" />

<ComponentRef Id="cmpA80443C3767E3E51F3DE88BFD0D7A33B" />

<ComponentRef Id="cmp214446AAABEBAC0C3827B8977083FAE2" />

<ComponentRef Id="cmp4AF022868FE6883520C700676C43B15D" />

<ComponentRef Id="cmpC27AA2C4496C9EFA95DCD663B031B5D0" />

<ComponentRef Id="cmp9CBBC8311BBFC54C8DC1162BB17E5AED" />

<ComponentRef Id="cmp033461B0777614621A2ED7B4E2B08D55" />

<ComponentRef Id="cmp0E43CDBBAE343957423AE2907AC16883" />

<ComponentRef Id="cmp8A8526D2061A14810E1B7A8A6E527DCD" />

<ComponentRef Id="cmpAE2DADEF126C59D8CCD3A18D8CDC49C8" />

<ComponentRef Id="cmp2F972A5C99F7EE708B7C232EE8647672" />

<ComponentRef Id="cmpB21F7D781FE7B006ABCA7974A21F29E2" />

<ComponentRef Id="cmpF345174585735CD7A31AE138DDE8B439" />

<ComponentRef Id="cmp06772C03A0ECA40F11F1D5C5ACD607D8" />

<ComponentRef Id="cmp79E890B8891FA87AA5B10A67E15E7E8E" />

<ComponentRef Id="cmp89C46AE8EC4175E62A9CFE3DF9DF924A" />

<ComponentRef Id="cmpC8F860B10D41961424874F69C6D84ED3" />

<ComponentRef Id="cmp285021B8CBC8E92B1CBCE4C88731083C" />

<ComponentRef Id="cmpABE9B0A93A9B14C0732EBD8CD17A11AE" />

<ComponentRef Id="cmpD9B960879A3227B971E33222CE13BC18" />

<ComponentRef Id="cmp3B3BB414D13FDBF2B0C7A9CEBD7D98F5" />

<ComponentRef Id="cmpB39B1096387C2617720F515D24953B37" />

<ComponentRef Id="cmp493A37205039E2A3A476A1A4F5360EBF" />

<ComponentRef Id="cmpF36A771DF9B1C4CD8E82C08A6D3D0786" />

<ComponentRef Id="cmp63F6A68C5538B45661168554BC3B93D1" />

<ComponentRef Id="cmp0158A6D8BED6391AC7150B6C6AE2A9F9" />

<ComponentRef Id="cmpDE45667E9E3CD9F800EAC1E02B57AAB7" />

<ComponentRef Id="cmp632453049391BAACDD117A40EC442743" />

<ComponentRef Id="cmpCE16E453CAD75A461B4FEBF451A51B7B" />

<ComponentRef Id="cmpC741D187A28A87BD33866C9AC09A1298" />

<ComponentRef Id="cmpB313B00E647A121B2CBE47F3048A18A7" />

<ComponentRef Id="cmp400428F6494DE58618E3B92539548C39" />

<ComponentRef Id="cmpFB2313AB16EF2467366ED136C0E61CE6" />

<ComponentRef Id="cmpB4C7B1A7A3EC0CB2DE805AC5CC5FC0D7" />

<ComponentRef Id="cmp00540BF93A805E0B9996945B61E1BC2F" />

<ComponentRef Id="cmp4C46C6668AD830D543AFE593D51676B3" />

<ComponentRef Id="cmp6EE914124966E3A0F695359116413DD4" />

<ComponentRef Id="cmp28E29B4CA17AB51913B756CD9397EEFE" />

<ComponentRef Id="cmp5DF24509F284FABC600232197F803DE5" />

<ComponentRef Id="cmp09E31B885345FBEA1F473AF7A10FD88D" />

<ComponentRef Id="cmpAE05C79A35A43ECCAC995A711DC4D60B" />

<ComponentRef Id="cmpB6D91209A93313D08150643F1738DED8" />

<ComponentRef Id="cmpDB66E821EC13977824FB1069DF5DAA69" />

<ComponentRef Id="cmp159AB26E32632FC87229090B3AA89BF8" />

<ComponentRef Id="cmp5BE3E12343551B853E1B143371CBEBE6" />

<ComponentRef Id="cmp0E081D9499DA225BB788494A1D86893D" />

<ComponentRef Id="cmpBC7134AF21BAE309E9FD1A52ADF92527" />

<ComponentRef Id="cmpB586F01E9F9657C498F2AB64E1F51BD7" />

<ComponentRef Id="cmp6EB049078039C276CADA69E7B79FDFA8" />

<ComponentRef Id="cmp3135BB68A1F44DDD9FE19B7D5FB4ED7B" />

<ComponentRef Id="cmp98ECAD990DF7B535B05EF6E840B7B2DF" />

<ComponentRef Id="cmpFE417CCCB859A1C3E4FB90A9C4E132F0" />

<ComponentRef Id="cmpD91C00B1B2AACF38761B45D0574884D7" />

<ComponentRef Id="cmp590EDE3CE6E09D0D43B35287E849B75A" />

<ComponentRef Id="cmp9D6F95F912C3B9C95E92E39BA1CE6BC9" />

<ComponentRef Id="cmpAD429D8A050A0D31B661626BDCA9C952" />

<ComponentRef Id="cmp3BDE199844AB81673ABB0E5E61E9B7B5" />

<ComponentRef Id="cmp0A4AB9AEF0D351FA5E63BCD67DC00607" />

<ComponentRef Id="cmpCC25F1CB6A1C9D8B47C407B818F73B59" />

<ComponentRef Id="cmpE0F5E8A2D6FEF181686370F0E1EAC632" />

<ComponentRef Id="cmp46B2E8BCD50BD668153E793EB737BC39" />

<ComponentRef Id="cmp0305CC2824E44F697B402E56A0CD1754" />

<ComponentRef Id="cmp0E00CBDCB82A904FD6AD82E458CA6AA7" />

<ComponentRef Id="cmp594B5E68E63675F4986F6717BC1F5950" />

<ComponentRef Id="cmp62748E79EC04EBE33DC46770AD65CDCE" />

<ComponentRef Id="cmpE1265CF3CC5E0B487E99D9D5936BB3F4" />

<ComponentRef Id="cmp1C162513D52824629D7C9FAF96054182" />

<ComponentRef Id="cmpB5FA2A488D2C7E59E0B52D18820CE00A" />

<!-- UNINSTALLATION ONLY CAs -->

<!-- Execute PreUninst_SetData before RemoveFiles action when uninstalling ONLY

and before DoPreUninstall to set the DoPreUninstall's Custom Action Data -->

<Custom Action="PreUninst_SetData" Before="DoPreUninstall">REMOVE~="ALL" AND NOT UPGRADINGPRODUCTCODE</Custom>

<!-- Execute DoPreUninstall before RemoveFiles when uninstalling ONLY -->

<Custom Action="DoPreUninstall" Before="RemoveFiles">REMOVE~="ALL" AND NOT UPGRADINGPRODUCTCODE</Custom>

<!-- Execute PostUninst_SetData after RemoveFiles action when uninstalling ONLY

and before DoPostUninstall to set the DoPostUninstall's Custom Action Data -->

<Custom Action="PostUninst_SetData" Before="DoPostUninstall">REMOVE~="ALL" AND NOT UPGRADINGPRODUCTCODE</Custom>

<!-- Execute DoPostUninstall after RemoveFiles action when uninstalling ONLY -->

<Custom Action="DoPostUninstall" After="RemoveFiles">REMOVE~="ALL" AND NOT UPGRADINGPRODUCTCODE</Custom>

<!-- Execute DoChecks after InstallFinalize action of first installation or repair or uninstall.

Since we schedule RemoveExistingProducts after InstallExecute, if we execute this CA at UPGRADINGPRODUCTCODE,

it will execute it twice : once when it installs new files (NOT Installed), and then when it removes unnecessary files (actual upgrade: UPGRADINGPRODUCTCODE).

Since the first time it executes, it will delete the RegKeys, the second time it executes will fail, and with

it the whole upgrade.

Therefore, we do not need to execute it at UPGRADINGPRODUCTCODE. -->

<Custom Action="DoChecks" After="InstallFinalize">(NOT Installed AND NOT REMOVE) OR REINSTALL OR (REMOVE~="ALL" AND NOT UPGRADINGPRODUCTCODE)</Custom>

<!-- Set the ARP -->

<Custom Action="SetARPINSTALLLOCATION" After="InstallValidate"></Custom>

<!-- ScheduleReboot only after DoChecks, which sets ISREBOOTREQUIRED -->

<ScheduleReboot After="DoChecks">ISREBOOTREQUIRED = "1"</ScheduleReboot>

</InstallExecuteSequence>

</Product>