LF VR621 by feonsetako (NSFW World)

[Lunetefu]

@OokamiOnigiri: If you ripped the world to offline VRCW, the code won't change

[420thiccmom]

@Lunetefu whats the passcode for offline?

[Reym]

@BerryBush its 5367, i archived the original way back before

[Reym]

@somerandomdeer i'm currently checking the source code of the world, might take a while

[Reym]

@lunetefu the fact you said this is interesting, the problem is when i have decompiled the world and got the code, mine is 4256, so i loaded the world and i try to do the cache swap method, and it did not work, for SOME reason the world download size changes to 400MB+, causing vrchat to overwrite my decompiled cache, of course the code didn't work because it got changed, you gotta be quick after you got the cache downloaded and decompiled in a quick session

another interesting thing i found is that they got admin list checking in the background when you entered the world, it can be captured using Fiddler or wireshark or MITM

[Lunetefu]

@Reym I won't comment about cache because I use VRCW, so it loads directly from that file and nothing more.

Unfortunately, I have very bad news regarding this VRCW file.
I created a macro that inputs codes from 0000 to 9999 into the keypad, and after a good few hours, not a single code granted access.
So there are a few possibilities:

• Either the code is longer than 4 digits, which I doubt.
• Or it requires an additional online whitelist and will reject any code without it. This is more likely, because offline = no access to the whitelist, but on the other hand, even after the update where the code was 6767, there was no need for Discord access, etc, buuut on the third hand, it was a completely different link and from a different person.
• Ooor I'm just blind AF for not noticing a huge portal xD

Unfortunately, I don't have experience in making worlds, and AssetRipper doesn't extract scripts. So i just can't simply place a portal without entering the code :<

It's also interesting that this VRCW weighs only 192 MB, while the older version 5367 weighs 441 MB. Could this be some kind of security feature?

[Reym]

@Lunetefu i have 3 possible code for it after i extracted and decompile the script, there is 4 digit and 5 or 6 digit long

how do you load vrcw directly? i did it before, i forgot how to do it

as for security feature, i decide to compare the downloaded vrcw directly from the api and directly from the game (decrypted), the size is different, but the file contains the same model, world, file names, etc2, the file size is do infact different, the one from api is 192MB while the non api is over 400MB+ after downloading from the game, like you said it could be security feature or something else within

the older version i archived and shared to the community was directly from the game, i forgot what is the size of the est in game before it got taken down, size was 441MB, while the new one is over 400MB+, it could be something?

[Lunetefu]

@Reym I couldn't sleep thinking about it, so I tweaked my macro and instead of taking a few hours, I did a speedrun right at the limit to check it one more time.

Unfortunately, after one hour, access was denied from 0000 to 9999, so that was a waste of time.

The script I use to launch VRCW:

@echo off
title VRChat Offline World Loader

set "GameDir=N:\Steam\steamapps\common\VRChat"
set "GameExe=N:\Steam\steamapps\common\VRChat\VRChat.exe"

:: Generate random room ID
set /a randomid_a=10000+%random%
set /a randomid_b=10000+%random%
set "randomid=%randomid_a%%randomid_b%"

echo Searching for .vrcw file...

:: Find first .vrcw file
for /r %%i in (*.vrcw) do (
    set "worldpath=%%i"
    goto :found
)

echo No .vrcw file found!
pause
exit /b

:found

echo Found:
echo %worldpath%

:: Convert backslashes to slashes
set "worldpath=%worldpath:\=/%"

echo Launching VRChat...

start "" "%GameExe%" --no-vr "--url=create?roomId=%randomid%&hidden=true&name=BuildAndRun&url=file:///%worldpath%"

pause

Change set GameDir and set GameExe to your location and
"start "" "%GameExe%" --no-vr " of course mean desktop mode.

Save the script as a .bat file, and place both the script and the .vrcw world file in same folder.

---

By the way, I was curious, so I imported this world into Unity. It actually looks just like the one after the update (with the extra rooms). Unfortunately, with all the missing scripts (FACS is useless here), it’s just too much of a waste of time to mess with this. It would be easier to just make the world by yourself based on a similar concept xDDD

[Reym]

@Lunetefu i'm gonna do few more test before i pinpoint something here, your research do seems interesting, i'm gonna try to enter the code i got from the decompiled script on unity instead of vrchat

We could recreate the world bit by bit from the extracted vrcw, which will take a tremendous amount of time, if anyone is willing to try, i can hand over those decompiled script of the world, it need some tweaking on it, the code is there just some are not like the original

Or i can share the keypad script here and maybe someone can figure it out

[UnrealFerret]

@Reym DM the keypad script if you want, I might figure out something!

[Reym]

@UnrealFerret i will send you the whole script instead, you might able to figure something out with it, i'll send it after i'm available

[UnrealFerret]

@Reym gotcha!

[TheRose]

It isn't a single static passcode. The world uses a time-based system that recalculates the 6-digit passcode every hour based on UTC time.

Theres some math stuff you could do to figure it out yourself but I'm going to provide a bat script you can run that will instantly get the code you should use

@echo off
setlocal enableextensions enabledelayedexpansion

set "PS_CMD=[DateTime]$now = [DateTime]::UtcNow; $val = ($now.Year * $now.Month * $now.Day * ($now.Hour + 1)) + 1358214; $str = $val.ToString(); if ($str.Length -gt 6) { $str = $str.Substring($str.Length - 6) }; Write-Output $str"

for /f "tokens=*" %%A in ('powershell -NoProfile -ExecutionPolicy Bypass -Command "%PS_CMD%"') do (
    set "PASSCODE=%%A"
)

echo ========================================
echo          KEYPAD PASSCODE GENERATOR       
echo ========================================
echo.
echo  Current Active Passcode : %PASSCODE%
echo.
echo ========================================
echo.
pause

lmk if you have any issues and Ill try my best to help out

[bunnyiscringe]

i think they were watching this cause the world link has gone down lol