{
  lib,
  stdenv,
  libsForQt5,
  fetchurl,
  fetchpatch,
  pkg-config,
  openssl,
  expat,
  enableGui ? true,
}:
stdenv.mkDerivation rec {

  pname = "ophcrack";
  version = "3.8.0";

  src = fetchurl {
    url = "mirror://ophcrack/ophcrack/${version}/ophcrack-${version}.tar.bz2";
    hash = "sha256-BIpt9XmDo6WjGsfE7BLfFqpJ5lKilnbZPU75WdUK7uA=";
  };

  patches = [
    (fetchpatch {
      url = "https://salsa.debian.org/pkg-security-team/ophcrack/-/raw/c60118b40802e1162dcebfe5f881cf973b2334d3/debian/patches/fix_spelling_error.diff";
      hash = "sha256-Fc044hTU4Mtdym+HukGAwGzaLm7aVzV9KpvHvFUG2Sc=";
    })
    (fetchpatch {
      url = "https://salsa.debian.org/pkg-security-team/ophcrack/-/raw/e19d993a7dbf131d13128366e2aac270a685befc/debian/patches/qmake_crossbuild.diff";
      hash = "sha256-sOKXOBpAYGLacU6IxjRzy3HCnGm4DFowDL2qP+DzG8M=";
    })
  ];

  nativeBuildInputs = [ pkg-config ] ++ lib.optional enableGui libsForQt5.wrapQtAppsHook;
  buildInputs =
    [ openssl ]
    ++ (if enableGui then [ libsForQt5.qtcharts ] else [ expat ])
    ++ lib.optional stdenv.hostPlatform.isDarwin expat;

  configureFlags =
    [ "--with-libssl" ]
    ++ (
      if enableGui then
        [
          "--enable-gui"
          "--with-qt5charts"
        ]
      else
        [ "--disable-gui" ]
    );

  installPhase = lib.optional stdenv.hostPlatform.isDarwin ''
    mkdir -p $out/bin
    cp -R src/ophcrack $out/bin
  '';

  meta = {
    description = "Free Windows password cracker based on rainbow tables";
    homepage = "https://ophcrack.sourceforge.io";
    license = with lib.licenses; [ gpl2Plus ];
    maintainers = with lib.maintainers; [ tochiaha ];
    mainProgram = "ophcrack";
    platforms = lib.platforms.all;
  };
}