- Nov 20, 2020
- 274
- 372
You need to decrypt the file {timestamp}.byte located into %appdata%/FurryVNE/cache/1/*.byte
Thats all
If you want to study the code i suggest you get older build as they now obfuscated the shit out anything that use that file
if you want the whole dialog tree for authentication online its simple
Connect to patreon return you are connected to patreon we dont care about this one because it can fail but it ok even if there no pledge they just check that the patreon login was a success
after that they go to yl2Cloud/verify-user that all the magic
the argument of the post request are
SessionID from unity, passwords, HardwareID
the password are multiple sha hash 15 in totate separated by "," as delimiter
the HardwareId is your device unique identifier
If you failed login to patreon the backend return {Valid : false, Reason : "login"}
if you failed the pledge check {Valid : false, Reason : "pledge" }
if you are banned {Valid : false, Reason : "banned" }
if all good the backend return a byte stream that is the 103kb byte file located in appdata
I bet money that it contain decrypted
Hardware id, username, game version, and some needed stuff for the meshes and texture to work
There no black magic here and dont try the only true or false to be set if it was that simple replacing jz by jmp will solve our problem but the game take the same path for online and offline as a code flow the only thing that make it change are the fields and they are mostly arrays and there is too much of them to attempt to patch them all
i dont think they are as stupid as the heat devs and let an true false easy open door as also they have a concrete example of what you need to not do
the key is the decrypted file it will solve all the inner working of the whole protection
they will not make the file download from cloud for one absolute reason bandwith is Expensive as fuck imagine if we needed to download files each time you launch the fucking game mumtiply that by the user base and add 20 or more % to account for new user and now search for an host that will have gread BP for low price and sond limit transfert speed if they do that they are fucking moron and they will pay over 1K/month for "anti hacking"
And i give you the solution to this now patch the file delete method to NOP launch the game wait download end and you have the files all of these cost for something that you can hack in 10 seconds straight
and if they make direct access over network you dont even want to know how much it will cost ask any game like shake and fidget or event facebook game how much that cost / month and you will be surprised by the price
