Note that FallenDoll.exe gets the activation app to launch from KCAP.ini. Simply spoofing the callback upon sending a key to Deactivation.exe will most likely not be enough as there may be another check in FallenDoll.exe. Very old and unusual protection I have not heard of until now.
Protection: ElecKey 2.X Internet, Enterprise, or Ultimate.
I still have to reverse Eck32/6420.dll and continue to look for the C# disassembly of deactivation.exe but it's a lot of work. What I'm wondering about is this RegistrationID and RegIDTran and what role they have in the activation process.įinding a way to force the activation is probably the easiest way because trying to isolate the game from the DRM looks almost impossible. The best message I could have was 'Invalid License Key! (0x003f89)' when trying to fill the empty LicenseKey and changing the error code. In the second request I can see in the answer and I guess when the MaxActivation isn't reached, we can get some data here. It's like the client doesn't care about what the server says in the first request. I messed a bit with the server answer trying to change the but to no use. I played with fiddler but I'm also stuck because I don't have any valid unused license. First time that I try on a profesionnal protection. Like other I'm trying to find a way to crack this but I'm no expert at all.
