maybe you could use Ollydbg (google
) its a debugger, you could have set a breakpoint after the extract code is executed. Then you look with winhex (google) into the RAM of Cops and look for the pass.
Should be a little bit easier but I havent tested.