Luigi Auriemma

the steps are ever the usual and are done via debugger (like ollydbg):

• breakpoint on the reading of the input (for example ReadFile for file operations)
• breakpoint on the memory where has been loaded the file or part of it
• following of all the operations performed on the memory and so setting breakpoints on the new locations where the data is copied
• when you find the function that performs the decryption you recognize it enough easily because it has an input and an output and obviously the output is decrypted :)

about signsrch remember that you must use it with the executable (and eventually the dlls) of the software that use the encrypted file, NOT on the file itself

Hey luigi, first time on these forums, and I'm trying to use this tool to get back my ranks due to a botched reinstall.

Anyway, I'm having a few difficulties and hopefully you can help me out. I'll identify what I'm doing, so it becomes easier.

1.) Copy the mpdata file from my Call of Duty 4 program files folder [under players/profiles/mpdata] to my C drive
2.) Copy codmpdatadec.exe to my C drive
3.) Run command prompt, change directry to C\
4.) Into cmd I type :



aaaabbbbccccdddd being the first 16 characters, lowercase of the codkey found in my registry.

the command prompt tells me "the hash doesn't" !

What am I doing wrong, please help me.

Sanss, try the first 16 of the key in UPPERCASE. I don't think it's lowercase.