Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 12:31

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 63 posts ]  Go to page Previous  1, 2, 3
Author Message
 Post subject: Re: call of duty "mpdata" file
PostPosted: 22 Jul 2010 20:39 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
the steps are ever the usual and are done via debugger (like ollydbg):
  • breakpoint on the reading of the input (for example ReadFile for file operations)
  • breakpoint on the memory where has been loaded the file or part of it
  • following of all the operations performed on the memory and so setting breakpoints on the new locations where the data is copied
  • when you find the function that performs the decryption you recognize it enough easily because it has an input and an output and obviously the output is decrypted :)

about signsrch remember that you must use it with the executable (and eventually the dlls) of the software that use the encrypted file, NOT on the file itself


Top
 Profile  
 
 
 Post subject: Re: call of duty "mpdata" file
PostPosted: 30 Aug 2010 07:59 

Joined: 28 Aug 2010 11:32
Posts: 1
Hey luigi, first time on these forums, and I'm trying to use this tool to get back my ranks due to a botched reinstall.

Anyway, I'm having a few difficulties and hopefully you can help me out. I'll identify what I'm doing, so it becomes easier.

1.) Copy the mpdata file from my Call of Duty 4 program files folder [under players/profiles/mpdata] to my C drive
2.) Copy codmpdatadec.exe to my C drive
3.) Run command prompt, change directry to C\
4.) Into cmd I type :

Code:
codmpdatadec c:\mpdata c:\output.txt aaaabbbbccccdddd


aaaabbbbccccdddd being the first 16 characters, lowercase of the codkey found in my registry.

the command prompt tells me "the hash doesn't" !

What am I doing wrong, please help me.


Top
 Profile  
 
 Post subject: Re: call of duty "mpdata" file
PostPosted: 31 Aug 2010 01:14 

Joined: 16 Aug 2007 06:25
Posts: 367
Sanss, try the first 16 of the key in UPPERCASE. I don't think it's lowercase.


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 63 posts ]  Go to page Previous  1, 2, 3

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
cron