

From the Deactivation.exe, a keycheck can be found: The way I see it is the following 2 options:įigure out the key generation scheme from how it checks the activation key.

Searching the internet I have been able locate some versions of ElecKey 2.X, however since the protection is not really used that widely, the only two links were from ~2009-2010, and their download link has expired long ago, as expected. Simply returning "true" in Deactivation.exe was not enough for me from my experiments. Note that FallenDoll.exe gets the activation app to launch from KCAP.ini. Simply spoofing the callback upon sending a key to Deactivation.exe will most likely not be enough as there may be another check in FallenDoll.exe. Very old and unusual protection I have not heard of until now. Protection: ElecKey 2.X Internet, Enterprise, or Ultimate.

I still have to reverse Eck32/6420.dll and continue to look for the C# disassembly of deactivation.exe but it's a lot of work. What I'm wondering about is this RegistrationID and RegIDTran and what role they have in the activation process.įinding a way to force the activation is probably the easiest way because trying to isolate the game from the DRM looks almost impossible. The best message I could have was "Invalid License Key! (0x003f89)" when trying to fill the empty LicenseKey and changing the error code. In the second request I can see in the answer and I guess when the MaxActivation isn't reached, we can get some data here. It's like the client doesn't care about what the server says in the first request. I messed a bit with the server answer trying to change the but to no use. I played with fiddler but I'm also stuck because I don't have any valid unused license. First time that I try on a profesionnal protection. Like other I'm trying to find a way to crack this but I'm no expert at all.
