As far as I understand that ElecKey, every key is generated by the guy who made the protected software (Project Helius in this case) and registered in some kind of database of the dev of ElecKey (Sciensoft). I don't think that generating a key will work. Option 1 (from the looks of it) seems to require patching of Deactivation.exe only, whereas option 2 will require patching of FallenDoll.exe. I do not possess an unpacker that can handle it though.Įither way, regardless of option 1 or 2, patching seems inevitable. Unpack FallenDoll.exe and patch out the licensing. I highly doubt any kind of asymmetric key algorithms are used in the process of key generation. Using this, it is very likely a proper key can be generated, however the method 'buttonActivate_Click' should be patched appropriately to not make a call to the server. , where 'KPKWFJ5BLS7L4HQVGLXXTEGF' is the 'InitLicenseKey', aka. This.Kc = new Ke圜heck(1721994409u, 1, 0, 0, 'KPKWFJ5BLS7L4HQVGLXXTEGF', Application.ExecutablePath) From the Deactivation.exe, a keycheck can be found: The way I see it is the following 2 options:įigure out the key generation scheme from how it checks the activation key.

Searching the internet I have been able locate some versions of ElecKey 2.X, however since the protection is not really used that widely, the only two links were from ~2009-2010, and their download link has expired long ago, as expected. Simply returning 'true' in Deactivation.exe was not enough for me from my experiments. Note that FallenDoll.exe gets the activation app to launch from KCAP.ini. Simply spoofing the callback upon sending a key to Deactivation.exe will most likely not be enough as there may be another check in FallenDoll.exe. Very old and unusual protection I have not heard of until now. Protection: ElecKey 2.X Internet, Enterprise, or Ultimate. I still have to reverse Eck32/6420.dll and continue to look for the C# disassembly of deactivation.exe but it's a lot of work. What I'm wondering about is this RegistrationID and RegIDTran and what role they have in the activation process.įinding a way to force the activation is probably the easiest way because trying to isolate the game from the DRM looks almost impossible. The best message I could have was 'Invalid License Key! (0x003f89)' when trying to fill the empty LicenseKey and changing the error code. In the second request I can see in the answer and I guess when the MaxActivation isn't reached, we can get some data here. It's like the client doesn't care about what the server says in the first request. I messed a bit with the server answer trying to change the but to no use. I played with fiddler but I'm also stuck because I don't have any valid unused license. First time that I try on a profesionnal protection. Like other I'm trying to find a way to crack this but I'm no expert at all.

Fallen doll activation key