Hey psychophat, did you by chance got to the http://link.ea.com/drm/service.jsp?s...viderType=%01d address? give a huge box and generate license button.....
i put in the GAPP9SHCALTKTQVVDYGR key and came back with "5,generic"
apparently, it does that for anything u put in there. oh well....
i...
i ran a comparison between a fresh paul.dll and a paul.dll from an activated ra3, both are identical. Same thing applies to launchersupport.dat. if you guys have any files for me to compare, let me know. i'll get to them in my spare time today while at work.
here is a snip of code in the paul.dll i think is interesting but i need someone to decode the routines to bypass them.
L10005F07:
push eax
push SSZ1002941C_GetProductLicense_returns__s_
call SUB_L1000A560
push eax
call...
it would still be easier to find the routine that ra3 uses in paul.dll and direct it to the part where it registers the game without even checking for a response. It's way too much data for me to process to do it, i know someone here can.
you would still run into the problem of the SECUROM still having codes specific to the user's PC. It may or may not work but EA and SECUROM are not script kiddies, I'm sure they thought of that one.
I'm pretty sure that a combination of registry and an edited paul.dll would do it, mainly paul...
If you can get the packets sent during the transmission, im sure we can get a program to send the right response. Hell, possibly setup a SQL server and then allow all codes.