Unity FurryVNE [2024-03-12] [FurryVNE Team]

[npomme]

there is more verify fonction i think they beefed it up a bit or cranked the obfuscation to the max setting i'm tracing the last called function and restart the process of listing interesting unused one because for some reason the naming is not the same and i cant reimport my ida database on the project so back to the start but at least i'm now familiar with the inner working of this login thing

 

[tester72]

yeah.... unfortunately the spine node from the original Yiffalicious has been replaced with a far more dynamic (but really slow) 3-slider menu, making it a challenge to get it to spin around on cue, turning high-paced animations into blursed cinema
View attachment 3339385



View attachment 3339389 "my child, you must end my suffering"

It gets worse the more you look at it.

 

[40C72]

there is more verify fonction i think they beefed it up a bit or cranked the obfuscation to the max setting i'm tracing the last called function and restart the process of listing interesting unused one because for some reason the naming is not the same and i cant reimport my ida database on the project so back to the start but at least i'm now familiar with the inner working of this login thing

They probably simply re-run their obfuscation script on it with each new build. Sigscanning for the functions should yield the important ones that got renamed and will be very quick, but running and saving the call stack to compare the disassembly of the new functions with the previous build will also work

 

[kurisu7885]

So looking at the posts I'm guessing no download yet because some are trying to crack it.

 

[npomme]

They probably simply re-run their obfuscation script on it with each new build. Sigscanning for the functions should yield the important ones that got renamed and will be very quick, but running and saving the call stack to compare the disassembly of the new functions with the previous build will also work

There tons of thoose :


they seem to be duplicate with minimal change is this created by the obfuscator and if yes my inside aretelling me that thoose are some sort of padding to make reversing harder but it seem to be really poor way to hide the real code as they are all exactly the same ....

 

[npomme]

I will assume that all verify function that are like the one in my previous post are garbage from the obfuscator because i'm really thinking they are because i cant make any sense of them this jmp to MonoBehaviour is strange

This narrow the path to no pladge or server error to 14 function

And there 23 function unused by the error no pledge execution chart

Now i need to make sense of these 23 unused one and find the needle

I know previous post already said it but if anyone can lend me an account that as a valid pledge for few hours that will help a lot if you are our hero feel free to mp me

 

[ThatWeirdGuyWithaWeirdHat]

There tons of thoose :
View attachment 3344163

they seem to be duplicate with minimal change is this created by the obfuscator and if yes my inside aretelling me that thoose are some sort of padding to make reversing harder but it seem to be really poor way to hide the real code as they are all exactly the same ....

I was not expecting to see IDA Disassembler on F95 today

 

[npomme]

I was not expecting to see IDA Disassembler on F95 today

thats the only tool i'm familiar with the others are really confusing

And i can't make this work they modified the latestcalled function that i was using as an entry point i managed to bypass the response check again but now it jump to some of the "not called normally" function wich seem encouraging at start but then it fall back into the login screen and i cant figure Why it's not crashing like before and now just ask me to loggin again i feel this is a little bit more tricky than i anticipated and i'm starting to ask myself if the entry point i use is not too late in the code i managed to find 2 function that call the scene manager of unity i think one of these are the real scene and not this loggin garbage but there no direct cross reference to the function so i need to find the manually wich is pure pain

 

[40C72]

they seem to be duplicate with minimal change is this created by the obfuscator and if yes my inside aretelling me that thoose are some sort of padding to make reversing harder but it seem to be really poor way to hide the real code as they are all exactly the same ....

Their obfuscation script also seems to flip a coin between inlining functions and not (or their compiler saw some optimisation), some functions that were previously split in two are now one.
For example, the one that checks the status code and determines tier status used to call a secondary function that would hash and store some settings:

Spoiler: Images

You don't have permission to view the spoiler content. Log in or register now.

So yeah, you should be able to pick up where you left off without trouble

 

[npomme]

I think i figured something out don't go full hype but they store the returned login code inside a register and if its not set to 401 the math dont add up dans the code crash !

after some crude patch the code jmp to a totally different location it's not done yet but it's a good thing!

 

[npomme]

i'm probably going to sleep for tonight but in need to share this magnificent new error the game gave me :

i think he really doesnt like all these value set to null because he cant get them from the server as i'm not really connected

 

[G_777888999000]

2024-02-11:

You must be registered to see the links

 

[Queen Zexiara]

jiminy christmas can you imagine the day VR comes bundled with this game

View attachment mobiusscarf's animation hnnnnnnggggff.mp4
by

You must be registered to see the links

 

[tester72]

jiminy christmas can you imagine the day VR comes bundled with this game

View attachment 3345099
by

You must be registered to see the links

It looks nice but ever since the previous i cant help but notice the odd way the joints and the body works.
At 10 seconds the arm gone throught the boobs and stayed in the body till 12, the fuckin part looks nice tho.

 

[Gmarto]

2024-02-11:

You must be registered to see the links

Hackers: tryin to crac

The new build:

 

[Depesonalization]

Hackers: tryin to crac

The new build:
View attachment 3345530

Dont think they'll even bother recompiling and doing their hacker things for 4 lines of change log

 

[The Name 2nd]

You can always just ignore the new build and focus on the one already out

 

[G_777888999000]

You can always just ignore the new build and focus on the one already out

It is better to focus on the new build, as there are bug fixes.

 

[npomme]

Yeah new build also mean they can skip the obfuscation step or make a mistake so always good to try on new builds

Monoworks i summon you ;p youre the real goat here without you we can't even try !

 

[npomme]

also seem the game check for the game version so the cloud reject any request from the new version so without the new file or at least what a good request to this server is looking i cant bypass anything

by the way the function that check the login for real is : YL2_Verification_Verify_JGOEKHJEBJM__IBJJHCBJNCH

but the missing data seem to be really important so we can't just patch all value to true if anyone that have pledged can capture their request to the /verify page on the cloud and share the response that will be really usefull !!!!