call of duty "mpdata" file

aluigi · **Posted:** 26 Aug 2009 21:46

if the codmpdata tool didn't show the "hash doesn't match" error/warning means that the file has been decrypted corretly.
there are absolutely no doubts on this: if the hash matches means that the file is EXACTLY the same of the original decrypted one.

Kestrel · **Joined:** 23 Aug 2009 11:12 **Posts:** 5

Metrium, I was in a similar situation last night. I had successfully decrypted my file, and was looking at it in a hex editor. I assumed the decrypt was successful because a) Luigi's tool didn't give the error message, and b) because a lot of the values were 00, which I assumed means they were unused, or kept just in case they wanted to store new things there in a later patch.

So I took my known kills value, 29900 and worked out the hex equivalent by googling "29900 in hex", which gave me 0x74CC

Rememver that the 0x is just an indicator that the rest of the number is in hex. So I was looking for 74CC, but I couldnt find it. My editor was in big endian format, so I was a bit lost, but then I looked for CC, and there was a 74 to the RIGHT of it, i.e. CC 74. I checked this out with other known numbers, deaths, headshots etc, and it always checked out. It's like you read the pairs backwards. So look for that.

I'm yet to work out what happens when I pass 0xFFFF kills, could it take up another pair? And what actually are those pairs, each letter is 2 bytes arent they? so a pair is 4 bytes? I'm still new to this myself :)

Kestrel · **Joined:** 23 Aug 2009 11:12 **Posts:** 5

Thinking about it, each letter can be 0 to F, or 16 possibilities, or 2^4, 4 bits, or half a byte. So each pair of number in your hex editor is a byte.

Now it comes down to what type of number they are (http://www.angelfire.com/fl3/mwalling/V ... Types3.htm) for me to work out how many bytes to read to get a value.

Infini · **Joined:** 11 Sep 2009 21:03 **Posts:** 2

Just figured I would drop in here, sorry for the couple of weeks grave digging :3

Anyhow, I changed computers about 3 days ago and lost all my profiles for cod5, which I couldn't be bothered getting manually again, so I went looking for a way of increasing them again. I noticed your decryptor here and decided to see how much of the file format I could reverse engineer. In the last couple of days I came up with this little profile editor, hope it helps people :3. (btw luigi hope you don't mind me packaging your codmpdatadec.exe file in this).

http://www.binaryphoenix.com/screenshot1.png
http://www.binaryphoenix.com/CoD5PE-110909.rar

If anyone wants the source (its in C#, .NET 3.5), feel free to ask, though its a pretty ugly hack job :3.

SomaFM · **Joined:** 16 Aug 2007 06:25 **Posts:** 367

Very cool! Nice work Infini.

Infini · **Joined:** 11 Sep 2009 21:03 **Posts:** 2

Thank you :3.

I've added a CoD4 profile editor too, seeing as they use an almost identical file format.

http://www.binaryphoenix.com/screenshot2.png
http://www.binaryphoenix.com/CoD4&5PE-110909.rar

Kestrel · **Joined:** 23 Aug 2009 11:12 **Posts:** 5

Infini - Thats neat man, nice work! Nice UI. It motivates me to finish my stats app :) It's just that after a day's coding at work, it's hard to come home and code some more.

What I'm still trying to get my head around was how Luigi worked out the encryption scheme in the first place. It's a modified version of a standard algorithm to boot. I'm in awe.

jojo143 · **Joined:** 20 Sep 2009 02:14 **Posts:** 1

THANK YOU FOR THE HELPFUL INFORMATION!!!!

My son was playing on a server today that turned out to be a rank boost server. He was so excited about the points assigned for each frag but not so happy when a frag score that was displayed was actually an algorithm. The algorithm set his rank to 1 (was 58), kills, deaths, streak and headshot to zero and his XP points to -2146783546. Luckily it did not destroy his accumulated arsenal and other unlocked items as has happened to several posters on other forums.

I downloaded the utilities discussed on this site and was able to restore his rank and other statistics. He's a VERY happy young man :-)

FadedAce · **Joined:** 15 May 2009 07:16 **Posts:** 3

Nice tool Infini - I wanted to... but I just couldn't find enough motivation to do that!

Any chance you'll be posting the source? I might get re-motivated with the next version.

sleepy · **Joined:** 06 Aug 2009 06:38 **Posts:** 2

Good job Infini. I'm glad that i just checked these forums again as i was about to do one myself.

azfar · **Joined:** 02 Jul 2009 06:30 **Posts:** 13

I am trying to download the cod4and5 archive but every time its broken, please any one upload it or email me at azfarhashmi@gmail.com" onclick="window.open(this.href);return false

I think the connection to server is breaking before completion of download.

azfar · **Joined:** 02 Jul 2009 06:30 **Posts:** 13

Ok here is the problem, I am using the cod4 ripped version (no installer) so the tool is unable to locate the profile folder path, any chance of manually provide it? and will it work with cod4 v1.7?

aluigi · **Posted:** 23 Sep 2009 12:56

Code:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Activision\Call of Duty 4]
"InstallPath"="c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\"

azfar · **Joined:** 02 Jul 2009 06:30 **Posts:** 13

whats the key type i choose (to create registry)

azfar · **Joined:** 02 Jul 2009 06:30 **Posts:** 13

Ok I have imported the reg key but same error.

sleepy · **Joined:** 06 Aug 2009 06:38 **Posts:** 2

i have noticed that in win 7 (and in vista i think) the mpdata is stored in
"c:\users\*username*\AppData\Local\Virtualstore\Program Files\Activision"...etc

I has the same problem as azfar, and got it working by copying the Players folder from the above location ot here "c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\", changing the data via the abovcee program, and copying it back.

dyurdz · **Joined:** 01 Sep 2009 08:44 **Posts:** 1

would you be so kind to share the code? i'd like to practice programming and would like to add a feature that would let you choose the path to your profile. thanks.

Sh4d0w · **Joined:** 21 Oct 2009 09:22 **Posts:** 2

First of all, respect for Luigi and Infini for their coding skills.

Second,
Since there is no reaction about the code, here's a simple tip:
http://www.red-gate.com/products/reflector/

And ofcourse for Infini a tip: (if he doesn't want his code to be decompiled)
http://msdn.microsoft.com/en-us/library/ms227240.aspx

Matt · **Joined:** 05 Apr 2009 20:39 **Posts:** 17

little help here guys i'm trying to use pbguidchecker with key2pb the guid checker works fine, but key2pb doesnt give me the right 32 char guid whats the seed i need to use with CoD4?. i even tried no seed for all possible ones none matched the guid that pb gave me..so?? little help please

SomaFM · **Joined:** 16 Aug 2007 06:25 **Posts:** 367

Matt, use Luigi's key2pb tool with the seed 0x00b684a3, first 16 characters of the full cd-key, no dashes. So for example on cdkey ABCD-1234-DEFG-5678-HIJL:

key2pb.exe ABCD1234DEFG5678 0x00b684a3

Matt · **Joined:** 05 Apr 2009 20:39 **Posts:** 17

Hey i tried the seed 0x00b684a3 and it doesn't give the the right Guid. the guid i get is 5c594dc395f6e2c46ed1a3b6686767b8, when the one i should be getting is 1e5e03822fd7853fe73e8d76021b9758

nvm, i didn't use the 1st 16chars of the key, thanks SomaFM

codex · **Joined:** 08 Nov 2009 14:57 **Posts:** 1

Luigi whether it is possible to recover the cd-key from a file "mpdata" or other?

aluigi · **Posted:** 08 Nov 2009 23:33

no, I guess it's technical impossibile, even knowing the original mpdata file (that we know since it's usually composed by various zeroes at the beginning).
it's a custom xtea + md4 hmac algorithm, so in any case the key is used only for the hash (key->hash, NOT hash->key)

Sotgar · **Joined:** 24 Dec 2009 14:01 **Posts:** 1

So, Im kinda new here :p I've been reading these posts because I lost my rank & stuff and I dont want to do it all over again (even in a fast-xp-server).

I got to the part where I have a "output.txt" and when I open with a hex editor I see alot of numbers.

Quote

Kestrel wrote:

Metrium, I was in a similar situation last night. I had successfully decrypted my file, and was looking at it in a hex editor. I assumed the decrypt was successful because a) Luigi's tool didn't give the error message, and b) because a lot of the values were 00, which I assumed means they were unused, or kept just in case they wanted to store new things there in a later patch.

So I took my known kills value, 29900 and worked out the hex equivalent by googling "29900 in hex", which gave me 0x74CC

Rememver that the 0x is just an indicator that the rest of the number is in hex. So I was looking for 74CC, but I couldnt find it. My editor was in big endian format, so I was a bit lost, but then I looked for CC, and there was a 74 to the RIGHT of it, i.e. CC 74. I checked this out with other known numbers, deaths, headshots etc, and it always checked out. It's like you read the pairs backwards. So look for that.

I followed this post when I had it opened with hex editor but I still can't figure out what a specific numbers mean

I also red a post with a pastebin of someone's PM. He said if I was looking for lets say the XP I gained I had to go to the location 0x0d8c. Where is this?? This is actually my main question :p

Btw, the links of the profile editor Infini made are dead (for me atleast).. does anyone have it and could you upload it somewhere?

Thanks

aluigi · **Posted:** 27 Dec 2009 17:34

Quote:

Btw, the links of the profile editor Infini made are dead (for me atleast)

I confirm, that website is completely dead

Feigling · **Joined:** 19 Dec 2009 16:45 **Posts:** 6

Sotgar wrote:

...
I got to the part where I have a "output.txt" and when I open with a hex editor I see alot of numbers.
...

Kestrel wrote:

...
So I took my known kills value, 29900 and worked out the hex equivalent by googling "29900 in hex", which gave me 0x74CC
...

I followed this post when I had it opened with hex editor but I still can't figure out what a specific numbers mean
...

Well there are a lot of numbers in the file because the profile includes a lot of values like different scores, playing times, playing time allies / axis, sp data, your custom class settings, weapon slots, attachments etc.. The given gamefiles can also tell you where to find everything, stats tables for example say you which slot in the file is used for some kind of stuff. Also Kestrel had a good idea, but he made a small mistake, he searched for 74CC in his data file but the score of 29900 is stored in reverse order so he needs to search for CC740000 instead of 000074CC.

Gagarin · **Joined:** 09 Mar 2010 23:13 **Posts:** 40

sorry for getting back old threads, but is it possible to encrypt changed .txt back to mpdata ? Imean with codmpdatadec tool. I see decrypt functions only...

aluigi · **Posted:** 10 Mar 2010 12:24

the tool automatically encrypts the file if it's not encrypted, so:
- first time to decrypt it
- second time for re-encrypting it

Gagarin · **Joined:** 09 Mar 2010 23:13 **Posts:** 40

Oh, I'm stupid =) I thought it was separate command to encrypt

thx, all working fine now

flightcrank · **Joined:** 22 Jul 2010 18:01 **Posts:** 1

aluigi, what were the steps you went through for finding out the encryption for this type of file ?

say if you had a different game save file. and upon opening it you realized it was encrypted. what steps would you typically take to find the encryption method ?

edit: i tried to use the signsrch too with signsrch.sig on the encrypted file with various flag combination's yet it found nothing.

Luigi Auriemma

call of duty "mpdata" file