Red Alert 3 BETA [Download, Keys and Information]

[psychophat]

@xzKinGzxBuRnzx
Correct it indeed adds and it updates some files, wait I don't think the list of files were ported here from Mininova thread. Any how in case you may need the list someone here will update with a post, I'm off now to cook .

Check with wohhai, lavarider, etc. they have tracked the files and this link on Mininova reg. RedAlert3 Beta2.

 

[Wohhai]

according to lavarider only 3 files were changed/added during the activation...
and he uploaded those 3

RapidShare: Easy Filehosting

 

[Lavarider]

according to lavarider only 3 files were changed/added during the activation...
and he uploaded those 3

RapidShare: Easy Filehosting

Yes, those files were changed, but the odd thing is, if they are deleted, it doesnt matter...so they dont matter. I've seen them in other programs, I believe they exist only for Media Center Edition Compatibility. Listen all, I have had my PC extract every registry key that has Red Alert in it from my registry. I have not tried a fresh intall of red alert + reg keys, but when I copy my game folder to another PC and add the reg keys, the game starts and is active. The Securom keys in the reg do not matter. It is simething in the registry for RA3 I believe...I am going to retest this later today with a fresh install + reg keys....If it works....You think about it..

 

[Wohhai]

Yes, those files were changed, but the odd thing is, if they are deleted, it doesnt matter...so they dont matter. I've seen them in other programs, I believe they exist only for Media Center Edition Compatibility. Listen all, I have had my PC extract every registry key that has Red Alert in it from my registry. I have not tried a fresh intall of red alert + reg keys, but when I copy my game folder to another PC and add the reg keys, the game starts and is active. The Securom keys in the reg do not matter. It is simething in the registry for RA3 I believe...I am going to retest this later today with a fresh install + reg keys....If it works....You think about it..

if you read this b4 u begin your work, try removing your real key and replacing it with a fake one before you apply those reg files to the other pc, as its useless if it works only because you used a real key first then changed it.

 

[Janus]

Yes, those files were changed, but the odd thing is, if they are deleted, it doesnt matter...so they dont matter. I've seen them in other programs, I believe they exist only for Media Center Edition Compatibility. Listen all, I have had my PC extract every registry key that has Red Alert in it from my registry. I have not tried a fresh intall of red alert + reg keys, but when I copy my game folder to another PC and add the reg keys, the game starts and is active. The Securom keys in the reg do not matter. It is simething in the registry for RA3 I believe...I am going to retest this later today with a fresh install + reg keys....If it works....You think about it..

Try to start their offline or simultaneously connected to a network...

 

[Ilove7]

I think maybe ollydbg (use google) can help, but i dont know how to use it ; (((

http://www.ollydbg.de/

 

[psychophat]

@siberianspy
If you have the mini-image just use it and change the filenames it'll do. I'll check too with using the Process Monitor and if it does pull a large amount of resource we need to note down the important ones.

@Lavarider
As Wohhai, Janus said and let me just add some stuff:

Test #1 - On the test PC
- copy the game don't install it
- replace the key with a fake one before merging the exported registry file
- run a test if it pass with online connection

Test #2 - Offline
- run a test if it pass with offline connection

Test #3 - No SekyuROM but online
- as an additional condition make sure NO SekyuROM files are present on the system (under program files and active user profile)
- run a test if it pass with online connection

Test #4 - No SekyuROM but offline
- run a test if it pass with offline connection

*-) This would clarify dependencies with the registry, connection or with key; then we can make conclusions.

@Ilove7
Indeed, OllyDbg is the way and the light in our darkness. But it requires a full pledged coder to take this one to the next level for it's hard to read the lines to get the correct end function before compiling the cracked .dat file.

 

[Lavarider]

@siberianspy

Test #1 - On the test PC
- copy the game don't install it
- replace the key with a fake one before merging the exported registry file
- run a test if it pass with online connection

Test #2 - Offline
- run a test if it pass with offline connection

Test #3 - No SekyuROM but online
- as an additional condition make sure NO SekyuROM files are present on the system (under program files and active user profile)
- run a test if it pass with online connection

Test #4 - No SekyuROM but offline
- run a test if it pass with offline connection

Test #1...PASSED!

Test#2....PASSED!

Test#3...FAILED!

Test#4...FAILED!

Securom is required!

When run with Securom blocker...Startup failed!

ERGC key does not matter if correct reg keys are in place.

Testing fresh install next.

 

[psychophat]

@Lavarider
So this means it's reliant to SecuROM as always. No need for a fresh install then.

EDIT: Found something during launch of the game right after the splash screen updating on new post with summary of gathered information.

 

[iBBi]

@Lavarider
So this means it's reliant to SecuROM as always. No need for a fresh install then.

EDIT: Found something during launch of the game right after the splash screen appears it calls msctf.dll then thread ends when you cannot input a key.

Will update in 5-10 minutes.

Scrap the information on EDIT, will expand in a couple of minutes more. Found a bulk load of information just now regarding handlers and what the game accesses during launch up to when you do not provide a key.

Apologies I need to verify each process, reg. key, and function it calls. Errr . . . need to look for my brain where o' where did I ever dropped that thing.

Will update in 30-45 minutes maybe more.

OMG . . . it's 752 lines of access calls and load functions. Okay I think I'll take my time in sorting this. And over 200+ reg. keys created, checked, closed and then removed.

This no longer funny.

Will update within the day, geez this is why I hate crossing the line into coding. Just kindly post any new findings I'll have to summarize this crap later so I can explain what I've dug up.

Just REFRESH every 15-30 minutes.

thnx for ur help buddy, good luck

 

[FandomofHell]

Have you seen what psychophat has been doing? He's tracked down almost all of the critical pieces of information that we need to solve this puzzle! We don't need an expert hacker when we've got psychophat!

Yay for psychophat!

 

[deathbyc4]

i ran a comparison between a fresh paul.dll and a paul.dll from an activated ra3, both are identical. Same thing applies to launchersupport.dat. if you guys have any files for me to compare, let me know. i'll get to them in my spare time today while at work.

 

[psychophat]

What I've found out, just a summary:

EDIT (2x):
Begins by assigning a PID based from your computer of course, then the thread begins. It starts by loading the splash screen calls the graphics, network and Internet communication, GUI handlers, multimedia and etc. API’s. C++, functions, dialogues, accessibility, C, libraries kicks in. More checks in between, now it checks on the registry if value is enabled Authenticode, querying server, checks PID, checks creation of TMP files located at \??\x:\docume~1\%user%\locals~1\tempor~1\Content.IE5\index.dat, ..\Cookies\index.dat, ..\History\History.IE5\index.dat, Au_.exe, ~nsu.tmp, CRPlug.dll, ..\nsq120.tmp\ dir which I cannot determine yet if its associated. Continuing with checks, input devices and then searches for registry keys which does non-existent. Continues checking system language, cryptography, checks registry if resource is locked and such key is also does not exist. Then more checks again, found that it also checks English (US).big file for menu verification, then prepare loading of the menu screen, checks for compatibility, checks for registry keys which are again non-existent to my registry. Checks registry paths on HKLM like: UserDataLeafName, ScreenshotsFolderName, ReplayForlderName, Profile…, Save…, UserLocalUserMaps, MapPackVersion, Version, Hash which again is non-extent in my registry only the main folder checks out fine this is for the game BTW. Checks the beta key again, the local save path for replays, then the SkuDef file, then checks for game exec modifications, checks filter with 1.0 .dat file, checks with compatibility with custom 1.0 .dat file, checks indentifierrs, authencation and objects which mostly is non-existent in my system. More checking in between, then looks for a protected file located in the red alert installation folder which again is non-existent my system. Checks system thread, launches game splash screen, checks keyboard layout, controls and language. It exits since I've not provided a valid key.

EDIT (5x):

Result: Tried faking the auth. code, it still verifying on the EA server and now it’s saying that it’s already used. Also it’s searching for another key in the registry located under policy which my registry does not have. Am still uncertain regarding why it calls for several files to be created but we've found out that I verifies a lot of information from the registry not only the one located on the EA key. Found out that the game dat is similar to Battle for Middle Earth 2, maybe it was based from it for it’s calls information or functions the same way. Found out also that it keeps on checking with version 1.0 very minimal call checks for the updates. Unless since my end does not get passed the key part it does not check the other versions.

Hmmn . . . okay I'm talking blindly with this one, if the prior installation or login checks it creates a lot of keys, strings on the systems/user's registry for local verification aside from the fact it checks thru the server during initialization phase. I cannot go beyond this point yet unless we can fool or take-out SekyuRhum entirely.

Well that's what I've managed to understand unless I'm pretty sore already and could no longer comprehend what am looking at.

BTW my eyes hurt and am out of smoke*

 

[Heavyarms2050]

Im not computer expert by all means, but wouldnt it be easier to create a fake gamespy server program of somesort to trick the RA3 program thinking that it access a real server?

 

[psychophat]

@Heavyarms2050
Not a gamespy server but an EA Authentication server. It's still on the thinking pool but I think we're still wandering on loose ends.

EDIT:
At least with our current information, we have some ends taken out by from the board.

 

[Heavyarms2050]

what about taking out the whole protocol of accessing the EA Authentication server?

 

[psychophat]

@Heavyarms2050
Unlikely for most of the commands, functions are hard coded in the .dat file and verifies using the SekyuROM.

 

[FandomofHell]

Darn. It would be nice if Lavarider could send you alone the copy of the files, to facilitate your breaking of the code, but that might not be possible, if he's worried about you leaking the verification code...

Actually, come to think of it, there was another registration code that was legit posted a couple of pages back... Um, I think it was the last post of page 7, if I recall correctly (the thread has been cleaned up since then, though). It was definitely legit, because EA's servers said that it was correct but had reached the maximum number of computers that it could be installed on.

If Lavarider is up to it, could he send you (psychophat) a small attachment (via, IDK, email or something) with the files, and you replace the serial code's with the already leaked one?

Edit: Found it! It was GAPP-9SHC-ALTK-TQVV-DYGR. The code comes back from the EA servers with an error saying, and I quote:

The game can not start

For security reasons, only a limited number of machines can ever be licensed by a single purchase. This limit has been reached. Please purchase another registration code, reinstall, and then try again.

 

[Heavyarms2050]

@FandomofHell

this is the key:

GAPP-9SHC-ALTK-TQVV-DYGR

 

[psychophat]

@FandomofHell
That would be good, but I doubt that is acceptable because in the big picture I'm looking at for example I have a legit key given by someone and I begin to tinker with it. That would mean that key has been only used once on first machine and mine second machine. If more instance of it checks with the server and registers with a different PID it will send information back to our system then will be locked out as well.

We need to pull the rabbit out of our *** to pull this off or a divine intervention from the cracking lords.

EDIT:
Remember the their new style for BETA or even in the full working versions is that it checks system signatures and registers them, then constantly verifies the auth. on their servers.

Oh, so this is why I love Blizzard, Id, Unreal and Valve. Openness for local play but full security for online use. The hatred just keeps filling the bucket, I pray that those developers don't get eaten by the greedy one.