Skyrim Patreon mods

5.00 star(s) 2 Votes

Narrow1049

Newbie
Sep 14, 2020
91
291
269
I will be honest I dont really know if I want to keep removing links after the requester gets the decrypted download, I reversed the DRM so it wasnt paywalled so everyone can benefit.

I think im gonna leave links up in future so by all means send me downloads and I will decrypt em but if I decrypt and upload I am leaving them up for everyone to benefit.

Edit: Mod authors getting mad their mod was decrypted doesnt really matter to be honest, the only time its gonna stop this is if they stop making mods or change the DRM but so far every mod sent to me is using this same DRM so it seems there isnt many options for them to switch to and this DRM is that good. HS2TOSKYRIM found out a few hours after I decrypted his mods and I checked the DRM site and it there was no indication that a better/stronger version was being made over half a year later and HS2 ended up releasing it publicly on Nexus lol.
 
Last edited:

Visiontry

New Member
Jan 26, 2024
3
1
38
I will be honest I dont really know if I want to keep removing links after the requester gets the decrypted download, I reversed the DRM so it wasnt paywalled so everyone can benefit.

I think im gonna leave links up in future so by all means send me downloads and I will decrypt em but if I decrypt and upload I am leaving them up for everyone to benefit.

Edit: Mod authors getting mad their mod was decrypted doesnt really matter to be honest, the only time its gonna stop this is if they stop making mods or change the DRM but so far every mod sent to me is using this same DRM so it seems there isnt many options for them to switch to and this DRM is that good. HS2TOSKYRIM found out a few hours after I decrypted his mods and I checked the DRM site and it there was no indication that a better/stronger version was being made over half a year later and HS2 ended up releasing it publicly on Nexus lol.




Hello, the link above is here, and the DRM is also NPlugin64.dll. Thank you very much. If you have already seen this, we will wait patiently. Thank you for your help.
 

NOway123341

New Member
Jun 27, 2020
4
5
89
The main problem is that he might find out who I am, which is troublesome.
I will be honest I dont really know if I want to keep removing links after the requester gets the decrypted download, I reversed the DRM so it wasnt paywalled so everyone can benefit.

I think im gonna leave links up in future so by all means send me downloads and I will decrypt em but if I decrypt and upload I am leaving them up for everyone to benefit.

Edit: Mod authors getting mad their mod was decrypted doesnt really matter to be honest, the only time its gonna stop this is if they stop making mods or change the DRM but so far every mod sent to me is using this same DRM so it seems there isnt many options for them to switch to and this DRM is that good. HS2TOSKYRIM found out a few hours after I decrypted his mods and I checked the DRM site and it there was no indication that a better/stronger version was being made over half a year later and HS2 ended up releasing it publicly on Nexus lol.
The main problem is that he might also find out who we are because of this, which would be troublesome because of payment records and such.
 

GMK1

Newbie
Nov 5, 2023
21
19
187
The main problem is that he might find out who I am, which is troublesome.

The main problem is that he might also find out who we are because of this, which would be troublesome because of payment records and such.
Are you using the same name here that you have with his patreon?
 

Narrow1049

Newbie
Sep 14, 2020
91
291
269
You can release a cracked version of the client.exe and let them decrypt the files themselves.
client.exe doesnt decrypt them, its how you register as a paid subscriber.

You open the client.exe and register with the code your given, that sends a request to the DRM server with your HWID, then when you start Skyrim the SKSE plugin will ping the server to check if you are authenticated if yes the BSA is loaded and the RBD file is loaded to do the decryption so the game can read it as normal.

Client.exe isnt actually the authenticator app its a loader for another executable called koi.exe, both are .NET but HEAVILY obfuscated, editing and saving it usually break the exe as due to the obfuscation
 
  • Like
Reactions: kazafei

hdsujcn

New Member
Dec 30, 2025
3
4
54
The core of his encryption program is the koi module, which can be obtained from memory. I extracted it and modified the core code in the shared link by using
de4dot-cex
, but I'm not very familiar with C# and don't know how to re-embed it.
 

Narrow1049

Newbie
Sep 14, 2020
91
291
269
The core of his encryption program is the koi module, which can be obtained from memory. I extracted it and modified the core code in the shared link by using
de4dot-cex
, but I'm not very familiar with C# and don't know how to re-embed it.
Yeah the protection is weak and obfuscation only slows you down at worst, the way im decrypting all these requested mods is with a custom C# Console App, when I first did it I only wrote it to decrypt the 4096 bytes from the header and save it to disk, I rewrote it an hour ago to automatically scan a folder and decrypt all mods, it does this fine for mods with a single bsa but for multiple bsa's I dont have an automated way to decrypt and restore the bsa .

HS2 had like 21 bsa but that was highly unusual most mods only have 1 bsa and they are fine, if a mod has more than 1 its usually 2 (MyMod.bsa plus a MyMod - Textures.bsa)

I never looked into how the DRM knows which bsa header in the rbd file belongs to which bsa so I cant automate it and garuntee it will restore the right header bytes to the bsa, if I had this I could release the decryptor but that could potentially mean the DRM author sees it and patches it (if they dont already know, no idea)
 

Narrow1049

Newbie
Sep 14, 2020
91
291
269




Hello, the link above is here, and the DRM is also NPlugin64.dll. Thank you very much. If you have already seen this, we will wait patiently. Thank you for your help.
Seems I forgot to acknowledge your message sorry.

Took a while to compress all the mods after decrypting (~28GB compressed to ~4GB) but its done now, the link has 2 files named the same as the links you shared:
"2" folder has 4 mods in it same as the link you shared
"mod" folder has 17 of the 19 in the link you shared

The 2 missing mods have no bsa's so nothing to decrypt which are:
  • (lilyrim)jade wings
  • 瑟拉娜】鸢

Here is the link
 

Visiontry

New Member
Jan 26, 2024
3
1
38
Seems I forgot to acknowledge your message sorry.

Took a while to compress all the mods after decrypting (~28GB compressed to ~4GB) but its done now, the link has 2 files named the same as the links you shared:
"2" folder has 4 mods in it same as the link you shared
"mod" folder has 17 of the 19 in the link you shared

The 2 missing mods have no bsa's so nothing to decrypt which are:
  • (lilyrim)jade wings
  • 瑟拉娜】鸢

Here is the link
You're a true hero! Because of this annoying DRM, coupled with the exorbitant prices, and the fact that everything is hidden and never shared, I've seen almost no one else willing to try these things besides you. Thanks again for your hard work. PS: I'm even afraid no one will try it anymore, like the vanished empress (denuvo is certainly much harder, but nobody in Skyrim does these).
 
  • Heart
Reactions: kazafei

baobaoxin

New Member
Jun 14, 2024
7
0
68
Seems I forgot to acknowledge your message sorry.

Took a while to compress all the mods after decrypting (~28GB compressed to ~4GB) but its done now, the link has 2 files named the same as the links you shared:
"2" folder has 4 mods in it same as the link you shared
"mod" folder has 17 of the 19 in the link you shared

The 2 missing mods have no bsa's so nothing to decrypt which are:
  • (lilyrim)jade wings
  • 瑟拉娜】鸢

Here is the link
Hi, I also have a few encrypted files here. Could you help me decrypt and share them? Thanks!
 
5.00 star(s) 2 Votes