#define _CRT_SECURE_NO_DEPRECATE
#include <iostream>

#define DWORD unsigned int
#define BYTE unsigned char


//0404078h
char const1[8*10];
char const2[16];
char const3[16];


void ShowDump(char* buff, DWORD s)
{
	//muestra el contenido de una zona de memoria en hexdecimal
	 int j,i;
	 i=0;
	 for (i=0;i<s;i+=8) {
		 
		 for (j=i;(j-i)<8;j++){
			 if (!(j<s)) {
				 printf ("   ");
				 continue;
			 
			 }
			 if ((unsigned char)buff[j] <= 0xF) printf("0");
			 printf("%X ",(unsigned char)buff[j]);
			 if ((j-i)==3) printf("| ");
		 }
		 
		 for (j=i;j<s && (j-i)<8;j++){
			 if (j==i) printf("| ");
			 if (buff[j]) printf("%c ",buff[j]);
			 else printf(". ");
		 }
		 printf("\n");
	 }
}

void name1(char * nombre,DWORD len,char * buff)
{
	//primer procesamiento del name
	  int j,i;
	  char c;
	  
	  for (j=0;j<=7;j++)
	  {
		  buff[j]=const1[j];
		  for (i=0;i<len;i++)
		  {
			  c=nombre[i];
			  c+=c;
			  c=c^buff[j];
			  buff[j]=c;
		  }
	  }
}

void pass1(char *pass,char *buff) {
	//primer procesamiento del pass
	 DWORD j;
	 BYTE b;
	 char l,h;
	 for (j=0;pass[j];j++) {	 
		   if (pass[j] > '?') pass[j]-='A'; //se queda con el valor numerico
		   else pass[j]-=0x16; //???
	 }
	 BYTE i;
	 for (i=0;i<=7;i++){

		 l = pass[2*i];
		 _asm SAR l,1
		 l &= 0xF; //bit bajo
		 h = pass[2*i+1];
		 _asm SAR h,1
		 _asm SHL h,4
		 buff[i]=h|l;
	 }
}

void reversePass1(char *pass,char *buff) {
	//revierte el primer proceso del pass
	BYTE i,j,b,h,l;
	for (j=0;j<8;j++)
	{
		//bit de menor peso
		b=buff[j];
		b&=0xF;
		b<<=1;
		pass[j*2]=b+'A';
		//bit de mayor peso
		b=buff[j];
		b>>=4;
		b<<=1;
		pass[j*2+1]=b+'A';
	
	}
}

void getDWORD(char * buff,char *cadena,char * garb)
{
	DWORD j,i,k;
	DWORD *ptrG,*ptrG2,*ptrB;
	for (j=0;j<8;j++) buff[j]=cadena[j];
	for (j=0;j<=1;j++)
	{
		for (i=0;i<=1;i++){
			if (j==i) continue;

			k=2*j+i;
			k <<= 2;
			ptrG = (DWORD*)((2*i+j)*4+garb);
			ptrG2 = (DWORD*)(garb+k);
			ptrB = (DWORD*)(buff+(j*4));
				
			k = ptrG[0] & ptrG2[0];
			ptrB[0] ^= k;
		}
	}

}

int main(int argc, char *argv[])
{
	char username[16],pass[32],nbuff[16],pbuff[16],n2buff[16],p2buff[16];
	memset(const1,0,sizeof(const1));
	memset(username,0,sizeof(username));
	memset(pass,0,sizeof(pass));
	memset(nbuff,0,sizeof(nbuff));   
	memset(n2buff,0,sizeof(n2buff)); 
	memset(pbuff,0,sizeof(pbuff)); 
	memset(p2buff,0,sizeof(p2buff)); 



	memcpy(const1,"\x4C\x0D\x18\x6A\x3F\xB9\x25\xE7\xBD\x96\x9A\x91\xDF\x8F\x9E\x8F\x1E\xDE\xDE\xDE\xDF\xA6\x9E\xDF\x8B\x9A\x91\x9A\x8C\xDF\x9E\x93\x98\x90\xDF\x8F\x9E\x8D\x9E\xDF\x8D\x9A\x9C\x90\x8D\x9B\x9E\x8D\xDF\x9C\x8A\x9E\x91\x9B\x90\xDF\x8C\x9A\x9E\x8C\xDF\x89\x96\x9A\x95\x90\xD7\xC0\xC0\xC0\xC0\xD6\x00\x00\x00\x00\x00\x00\x00\x00",sizeof(const1)); 
	memcpy(const2,"\x0D\xEB\xD0\x68\xE4\x6A\x9D\x48\x81\x56\xA3\xE3\x9E\x85\xF1\x7D",sizeof(const2));
	memcpy(const3,"\xCA\x78\x8E\x2C\xD5\x61\xA9\x17\xB4\xA5\x96\x87\xF0\xE1\xD2\xC3",sizeof(const3));
	system("CLS");
	printf("Usuario:");
	scanf("%s",username);
	strcpy(pass,"");
	
	system("CLS");
	ShowDump(username,sizeof(username));
	ShowDump(pass,sizeof(pass));
	name1(username,strlen(username),nbuff);
	ShowDump(nbuff,sizeof(nbuff));
	pass1(pass,pbuff);
	ShowDump(pbuff,sizeof(pbuff));
	getDWORD(n2buff,nbuff,const2);
	ShowDump(n2buff,sizeof(n2buff));
	getDWORD(p2buff,pbuff,const3);
	ShowDump(p2buff,sizeof(p2buff));

	
	//final
	DWORD *pdw1,*pdw2;
	pdw1=(DWORD*)n2buff;
	pdw2=(DWORD*)p2buff;
	DWORD res[2];
	char * ver= (char*)&res;
	memset(pbuff,0,sizeof(pbuff));
	memset(pass,0,sizeof(pass));
	res[0]=pdw1[0]^pdw2[0];
	res[1]=pdw1[1]^pdw2[1];

	for (int j=0;j<8;j++) pbuff[j]=ver[j];
	reversePass1(pass,pbuff);
	ShowDump(ver,8);
	ShowDump(pass,sizeof(pass));
	for (int j=0;j<80;j++) printf("-");
	printf("Usuario:%s\nClave:%s\n",username,pass); 

	system("PAUSE");
	return EXIT_SUCCESS;
}

WriteProcessMemory(hProcess,(LPVOID)0x549539, 1, 1, NULL); 

#define NULL 0

#define OFFSET_TIEMPO 0x100579C  <--- ahi pones el del oro

tiempo+=10000;

WriteProcessMemory(hProcess,(LPVOID)OFFSET_TIEMPO, &tiempo, 4, NULL);