typedef BOOL (_stdcall * SymFromAddr_t) (HANDLE hProcess, DWORD64 Address, PDWORD64 Displacement, PSYMBOL_INFO Symbol) typedef BOOL (_stdcall *StackWalk64_t) (DWORD MachineType, HANDLE hProcess, HANDLE hThread, LPSTACKFRAME64 StackFrame, PVOID ContextRecord, PREAD_PROCESS_MEMORY_ROUTINE64 ReadMemoryRoutine, PFUNCTION_TABLE_ACCESS_ROUTINE64 FunctionTableAccessRoutine, PGET_MODULE_BASE_ROUTINE64 GetModuleBaseRoutine, PTRANSLATE_ADDRESS_ROUTINE64 TranslateAddress) typedef BOOL (_stdcall *SymInitialize_t) (HANDLE hProcess, PCSTR UserSearchPath, BOOL fInvadeProcess) typedef DWORD (_stdcall *SymSetOptions_t) (DWORD SymOptions) typedef DWORD (_stdcall *SymGetOptions_t) () HMODULE dbgDll = LoadLibrary ('dbghelp.dll') MB_ICONERROR | MB_OK | MB_SETFOREGROUND | MB_TOPMOST) MessageBoxW (0, GetString ('EXCEPTION_REPORT_EXT'), PDWORD sp = (PDWORD) ep->ContextRecord->Esp addr = (DWORD) ep->ExceptionRecord->ExceptionAddress ĝWORD exCode = ep->ExceptionRecord->ExceptionCode

ĞXCEPTION_POINTERS *ep = args->ExceptionPointers ĞxceptionHandlerThreadArgs *args = (ExceptionHandlerThreadArgs *) threadArg

void ExceptionHandlerThread (void *threadArg) codeEnd = (size_t) mi.BaseAddress + mi.RegionSize if (sectorsRemaining.HighPart = 0 & sectorsRemaining.LowPart = sizeof (mi)) Print (' If aborted, copying will have to start from the beginning (if attempted again). ') while (sectorsRemaining.HighPart != 0 || sectorsRemaining.LowPart != 0) Print (' Copying system to hidden volume. if (!(sectorsRemaining = ActivePartition.SectorCount)) sectorsRemaining = EncryptedVirtualPartition.SectorCount if (!MountVolume (drive, exitKey, true, false)) Print (IsLbaSupported (PartitionFollowingActive.Drive) ? ' due to a bug' : ' - Enable LBA in BIOS') PrintErrorNoEndl ('Your BIOS does not support large drives') || GetCrc32 (SectorBuffer, sizeof (SectorBuffer)) != OuterVolumeBackupHeaderCrc) if (ReadSectors (SectorBuffer, PartitionFollowingActive.Drive, PartitionFollowingActive.EndSector - (TC_VOLUME_HEADER_GROUP_SIZE / TC_LB_SIZE - 2), 1) != BiosResultSuccess Check if BIOS can read the last sector of the hidden system

if (PartitionFollowingActive.Drive = TC_INVALID_BIOS_DRIVE) int fragmentSectorCount = 0x7f // Maximum safe value supported by BIOS static bool CopySystemPartitionToHiddenVolume (byte drive, byte &exitKey) + Print ('WARNING: Using TrueCrypt is not secure') #endif // TC_WINDOWS_BOOT_RESCUE_DISK_MODE Diff -git a/Boot/Windows/BootMain.cpp b/Boot/Windows/BootMain.cpp

Github truecrypt