#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#ifdef HAVE_CONFIG_H
#include "config.h"
#endif
#include "wv.h"

/* ROTATE_LEFT rotates x left n bits , with a bitlen of b*/
#define ROTATE_LEFT(x, n,b) (((x) << (n)) | ((x) >> (b-(n))))

int
wvDecrypt95 (wvParseStruct * ps)
{
    FILE *mainfd;
    unsigned char pw[16], z, g;
    unsigned char key[16];
    U8 pwkey[2];
    int i, c, len, ret = 1;
    U32 j = 0;
    unsigned long end;
    unsigned char test[0x10];
    U16 hash, h;

    if (ps->password[0] == 0)
	return (ret);

    hash = (U16) ps->fib.lKey & 0xffff;

    pwkey[0] = (U8) ((ps->fib.lKey >> 16) & 0xFF);
    pwkey[1] = (U8) ((ps->fib.lKey >> 24) & 0xFF);

    /* 
       currently I do not know what the story is with the actual
       input of non ascii password for word 95
     */
    for (i = 0; i < 16; i++)
	pw[i] = (U8) ps->password[i];

    len = strlen ((char *) pw);
    i = len;
    z = 0xbb;
    for (; i < 16; i++)
      {
	  switch (j)
	    {
	    case 0:
		pw[i] = 0xbb;
		break;
	    case 1:
		pw[i] = 0xff;
		break;
	    case 2:
		pw[i] = 0xff;
		break;
	    case 3:
		pw[i] = 0xba;
		break;
	    case 4:
		pw[i] = 0xff;
		break;
	    case 5:
		pw[i] = 0xff;
		break;
	    case 6:
		pw[i] = 0xb9;
		break;
	    case 7:
		pw[i] = 0x80;
		break;
	    case 8:
		pw[i] = 0x0;
		break;
	    case 9:
		pw[i] = 0xbe;
		break;
	    case 10:
		pw[i] = 0xf;
		break;
	    case 11:
		pw[i] = 0x0;
		break;
	    case 12:
		pw[i] = 0xbf;
		break;
	    case 13:
		pw[i] = 0xf;
		break;
	    case 14:
		pw[i] = 0;
		break;
		j++;
	    }
	  j++;
      }

    h = 0xce4b;
    wvTrace (("hash is now %x\n", hash));
    for (i = 0; i < 16; i++)
      {
	  g = (pw[i] ^ pwkey[i & 1]);
	  g = ROTATE_LEFT (g, 7, 8);
	  h ^= (ROTATE_LEFT (pw[i], i + 1, 15) ^ (i + 1) ^ i);
	  wvTrace (("h is now %x\n", h));
	  if (i == len - 1)
	      if (h == hash)
		  ret = 0;
	  key[i] = g;
      }

    if (ret)
	return (ret);

    wvStream_offset_from_end (ps->mainfd, 0);
    end = wvStream_tell (ps->mainfd);

    j = 0;
    wvStream_goto (ps->mainfd, j);

    mainfd = tmpfile ();

    while (j < 0x30)
      {
	  c = read_8ubit (ps->mainfd);
	  fputc (c, mainfd);
	  j++;
      }

    while (j < end)
      {
	  for (i = 0; i < 16; i++)
	      test[i] = read_8ubit (ps->mainfd);
	  for (i = 0; i < 16; i++)
	    {
		if (test[i] != 0)
		    c = key[i] ^ test[i];
		else
		    c = 0;
		fputc (c, mainfd);
	    }
	  j += 16;
      }


    if (ps->tablefd0)
	wvStream_close (ps->tablefd0);
    if (ps->tablefd1)
	wvStream_close (ps->tablefd1);
    wvStream_close (ps->mainfd);

    wvStream_FILE_create (&ps->tablefd, mainfd);
    wvStream_FILE_create (&ps->tablefd0, mainfd);
    wvStream_FILE_create (&ps->tablefd1, mainfd);
    wvStream_FILE_create (&ps->mainfd, mainfd);
    wvStream_rewind (ps->tablefd);
    wvStream_rewind (ps->mainfd);
    ps->fib.fEncrypted = 0;
    wvGetFIB (&ps->fib, ps->mainfd);
    ps->fib.fEncrypted = 0;
    return (ret);
}

#if 0
int
wvCrack95 (wvParseStruct * ps)
{
    /* 
       is is quite possible to crack password 95 files fairly easily,
       there is standard frequency analysis on the cipher text whiich
       is simply stamped with a 16byte xor key from 0x28 onwards,
       but there are quite a few known bytes in the fib header with
       is also encrypted, for instance unencrypted is the beginning
       and end of the text stream, encrypted is the len of the
       text stream, so already you have a few bytes of the xor key,
       and so on, the fcStshOrig is nearly always the same as the fcStsh
       so theres another byte or two, and so forth. If a struct has
       an lcb of 0, it remains zero despite what should happen in a
       xor and thus you know that the fc before and after the 0 lcb
       are the same, and so forth, so you could derive a lot of 
       information about the xor key from the header, I might
       complete this some day, there have been a load of other programs
       that do similiar things, so i don't know that my adding to that
       pile will help
     */


    int i;
    U8 block1[4];
    U8 block2[4];
    U32 reallen;
    wvError (("begin is %x\n", ps->fib.fcMin));
    wvError (("end is %x\n", ps->fib.fcMac));
    wvError (("len is %x\n", ps->fib.fcMac - ps->fib.fcMin));

    reallen = ps->fib.fcMac - ps->fib.fcMin;

    wvError (("encrypted len is %x\n", ps->fib.ccpText));
    block1[0] = (U8) (ps->fib.ccpText & 0xFF);
    block1[1] = (U8) ((ps->fib.ccpText >> 8) & 0xFF);
    block1[2] = (U8) ((ps->fib.ccpText >> 16) & 0xFF);
    block1[3] = (U8) ((ps->fib.ccpText >> 24) & 0xFF);

    block2[0] = (U8) (reallen & 0xFF);
    block2[1] = (U8) ((reallen >> 8) & 0xFF);
    block2[2] = (U8) ((reallen >> 16) & 0xFF);
    block2[3] = (U8) ((reallen >> 24) & 0xFF);

    key[4] = block1[0] ^ block2[0];
    key[5] = block1[1] ^ block2[1];
    key[6] = block1[2] ^ block2[2];
    key[7] = block1[3] ^ block2[3];


    block1[0] = (U8) (ps->fib.lcbStshf & 0xFF);
    block1[1] = (U8) ((ps->fib.lcbStshf >> 8) & 0xFF);
    block1[2] = (U8) ((ps->fib.lcbStshf >> 16) & 0xFF);
    block1[3] = (U8) ((ps->fib.lcbStshf >> 24) & 0xFF);

    block2[0] = block1[0] ^ key[4];
    block2[1] = block1[1] ^ key[5];
    block2[2] = block1[2] ^ key[6];
    block2[3] = block1[3] ^ key[7];

    reallen = sread_32ubit (block2);
    fprintf (stderr, "reallen is %x\n", reallen);

    block2[0] = (U8) (reallen & 0xFF);
    block2[1] = (U8) ((reallen >> 8) & 0xFF);
    block2[2] = (U8) ((reallen >> 16) & 0xFF);
    block2[3] = (U8) ((reallen >> 24) & 0xFF);

    block1[0] = (U8) (ps->fib.lcbStshfOrig & 0xFF);
    block1[1] = (U8) ((ps->fib.lcbStshfOrig >> 8) & 0xFF);
    block1[2] = (U8) ((ps->fib.lcbStshfOrig >> 16) & 0xFF);
    block1[3] = (U8) ((ps->fib.lcbStshfOrig >> 24) & 0xFF);

    key[12] = block1[0] ^ block2[0];
    key[13] = block1[1] ^ block2[1];
    key[14] = block1[2] ^ block2[2];
    key[15] = block1[3] ^ block2[3];


    block1[0] = (U8) (ps->fib.fcStshf & 0xFF);
    block1[1] = (U8) ((ps->fib.fcStshf >> 8) & 0xFF);
    block1[2] = (U8) ((ps->fib.fcStshf >> 16) & 0xFF);
    block1[3] = (U8) ((ps->fib.fcStshf >> 24) & 0xFF);

    block2[0] = (U8) (ps->fib.fcPlcffndRef & 0xFF);
    block2[1] = (U8) ((ps->fib.fcPlcffndRef >> 8) & 0xFF);
    block2[2] = (U8) ((ps->fib.fcPlcffndRef >> 16) & 0xFF);
    block2[3] = (U8) ((ps->fib.fcPlcffndRef >> 24) & 0xFF);

    if ((block1[0] == 0) && (block2[0]) && (reallen < 0xff))
      {
	  fprintf (stderr, "good\n");
	  key[8] = reallen ^ block2[0];
      }
    else
	fprintf (stderr, "crap\n");

    block2[0] = (U8) (ps->fib.lcbPlcffndRef & 0xFF);
    block2[1] = (U8) ((ps->fib.lcbPlcffndRef >> 8) & 0xFF);
    block2[2] = (U8) ((ps->fib.lcbPlcffndRef >> 16) & 0xFF);
    block2[3] = (U8) ((ps->fib.lcbPlcffndRef >> 24) & 0xFF);

    fprintf (stderr, "%x %x %x %x\n", block2[0], block2[1], block2[1],
	     block2[0]);

    if ((block2[0] == 0) && (block2[1] == 0) && (block2[2] == 0)
	&& (block2[3] == 0))
      {
	  fprintf (stderr, "good\n");
	  block1[0] = (U8) (ps->fib.fcPlcffndRef & 0xFF);
	  block2[0] = (U8) (ps->fib.fcPlcffndTxt & 0xFF);
	  reallen = key[8] ^ block2[0];
	  key[0] = reallen ^ block1[0];
      }

    for (i = 0; i < 16; i++)
	fprintf (stderr, "key %d is %x\n", i, key[i]);
    return (0);
}
#endif