VRCA-Recovery Tool! Get Fully Working Unity Projects Out of VRCA Files

[kirin35]

VRCA Recovery turns a VRChat avatar file (.vrca) back into a Unity project you can open, edit and build again. It sets up a Unity 2022.3.22f1 project with the VRChat Avatars SDK already installed, and puts your avatar in a ready-made scene.

[register or login to view this hidden content]
[register or login to view this hidden content]

Virus Total for 1.0 Windows
Virus Total for 1.0 Linux

What comes back

• The avatar itself: prefabs, meshes, textures, materials, animator controllers, expression menus and parameters.
• Shaders: the app looks for the real shader first, in this order:
  1. your own shader libraries;
  2. lilToon and Poiyomi;
  3. packages found in VRChat’s listings, the community index or public shader releases.

Locked Poiyomi materials are matched to the unlocked shader they came from. If no real copy exists, the full edition rebuilds the shader from the compiled code inside the avatar. When that isn’t possible either, a placeholder keeps the material’s properties.

• Animations: in the full edition, animations whose targets were stored as scrambled names get their real targets back. That covers object paths, blend shapes, animator parameters and material properties.
• Build tools: VRCFury (including SPS), GoGo Loco and Modular Avatar are detected and installed, and their scripts are reconnected.
• Other packages: added only when the avatar’s shaders or scripts prove it needs them.

How it checks its work

A finished recovery has passed more than “it opens in Unity”:

1. Unity loads the project and checks the avatar descriptor, the animator, the playable layers, the expressions and every shader the app bound.
2. The SDK builds the avatar offline and runs its own avatar checks, including the PC performance rating. No account or upload is involved.
3. The rebuilt avatar is exported again and compared with the original, so you can see what’s missing or changed.
4. Each menu control is clicked through in Play mode with Av3Emulator, and the report notes any control that does nothing.

What it can’t bring back

An avatar file only holds what VRChat needs to show the avatar. Anything that lived only in the creator’s project is gone:

• Source art: PSD, BLEND and FBX files with their import settings. You get the finished meshes and textures instead.
• The rig setup: the rig comes back as it was exported, not rebuilt, so it may need work before you rely on it.
• Shaders with no compiled data: these can’t be rebuilt, so their materials keep a placeholder.
• Editor-only setup: anything that never made it into the upload is not in the file to recover.

Getting started

1. Install Unity 2022.3.22f1 through Unity Hub and sign in so the editor has a license. The app finds Unity; it never downloads it for you.
2. Open VRCA Recovery and accept the agreement.
3. Setup: click Download missing. It downloads and verifies AssetRipper, the VRChat SDK and the optional shader and build-tool packages. If Unity is installed somewhere unusual, use Locate Unity….
4. Recover: drop in your .vrca files, or a whole folder of them, pick an output folder and click Start recovery. Each step shows live progress, and you can switch pages while it runs.
5. Reports: see what was restored, what was approximated and what needs attention. Every shader is listed with how it was recovered.

Tip: if the avatar uses paid shaders or Booth assets you own, add the .unitypackage files or folders under More options → Libraries. The app checks each one against the avatar and only uses what it actually needs, so you get the real thing instead of a rebuild.

Good to know

• You’re responsible for what you do with recovered content.
• A passing check doesn’t mean the avatar is identical to the original. Read the reports and look the avatar over in Unity before you upload anything.
• Recovery takes a while, roughly 15–25 minutes per avatar with all checks on. You can turn off the SDK build and the menu test under More options to make it faster.
• The app doesn’t check for updates, and links open only when you click them.

---

[register or login to view this hidden content] example recovered avatars.
Screenshots for example recovered avatars.

[kazeniku]

thank you
hope theres a demonstrate video

[trashpanda]

Windows defender is sadly flagging this as Trojan:Win32/Cloxer

[x_anonamiss_x]

Yeah my chrome blocked the file right after download because of a virus...

[JP1z1]

idk how to get the VRCA....

[kirin35]

@trashpanda said:

Windows defender is sadly flagging this as Trojan:Win32/Cloxer

@x_anonamiss_x said:

Yeah my chrome blocked the file right after download because of a virus...

It is a false positive, you can look at the virustotal behavioral analysis. It is mainly thinking its a virus because it is able write/extract so many files at once. And it is unsigned obviously.

It does also work under a VM both Linux or Windows if you wanna do that instead.

[leochan]

It is a 64-bit Tauri (Rust) app, and under the hood, it is a Unity project recovery tool for VRChat. It calls AssetRipper headlessly and includes a process to rewrite shader references. The network destinations were only VRCFury, Poiyomi, nadena, lilxyzw, and VRChat's public VPM, plus Buy Me a Coffee for donations and Umami for analytics.

Discord webhooks, Telegram, ngrok, pastebin, Run keys, PowerShell, and Task Scheduler are zero in terms of strings. Keylog and cmd.exe are strings from rustls and the Rust standard library, and this is not a keylogger or remote control tool.

looks no rat/trojan
thanks for shareing!

[kirin35]

@leochan Many thanks for conforming I have found the issue actually. It is umami causing the detection even though my other app for VRCW recovery uses the same thing. Because Tauri uses webview on windows it thinks its a clicker app; as in like it clicks on things on behalf of you. VRCW Recovery tool on the other hand was done with .NET Native AOT with Avalonia so it is drawing its own window hence never triggering this detection.

I might remove the Umami or try to solve it. Also to be clear only analytics its providing me is how many people clicked "I agree" button on the pop-up. Nothing else.

[x_anonamiss_x]

@leochan dang you know your stuff, thanks for all that! I appreciate the explanation.

[M I K O S H I]

i hope u know people that helping rippers world stuff ripping etc hope u know they are angels people making tools to help others is such angels and deserves money tips for the hard work gen if u ever have a tip donation let me know cause im gen grateful

[M I K O S H I]

i also had a question its not provided the fix animations?

[lenkagamine12]

@M-I-K-O-S-H-I now i have like a vcc implementable version of this