[RMXP] PokeFallen

[Geo]

Both the Launcher (Launcher.exe) and the game (Fallen.exe) have checks for Cheat Engine's, and other processes', windows titles. My Cheat Table takes care of the game's (Fallen.exe) check when enabling. For the Launcher (Launcher.exe), I created a patcher to patch the "x64-msvcrt-ruby310.dll" file and prevent its ability to get window titles. This is currently for public version "17.9 - TEMPORADA 15" and I'm still awaiting the release of "18.0 - TEMPORADA 16", in the event that something changes.

Be sure to apply my patches for the Launcher's "x64-msvcrt-ruby310.dll" file and be sure my Cheat Table is activating properly, when attached to the "Fallen.exe" process.

[Freddy1006]

Consegui abrir o jogo e o cheat engine, porem quando vou utilizar alguma trapaça o jogo fecha, pode me ajudar?

[mysterd]

Hey Geo, do you know how I can play the game now that it has this login system? Is there a way to bypass this? Because my save wasn't approved.

[Geo]

I'm slowly getting to it. Now that they're verifying save data for irregularities, I'm wanting to get a more in-depth look at the code to see if I can circumvent that. Might be best to re-implement some offline save related stuff if possible, and the best way to go about this is reprogramming the game. They changed their RGSS archive file encryption key and have obfuscated it within a AES-CTR+HMAC256 encryption. I've found the relevant encryption keys and I'm just about done updating my, yet to be released, packer/unpacker with these new encryption/obfuscation methods. Although, like I said, I'm taking it slow. Gimmie some time.

[mysterd]

I'm slowly getting to it. Now that they're verifying save data for irregularities, I'm wanting to get a more in-depth look at the code to see if I can circumvent that. Might be best to re-implement some offline save related stuff if possible, and the best way to go about this is reprogramming the game. They changed their RGSS archive file encryption key and have obfuscated it within a AES-CTR+HMAC256 encryption. I've found the relevant encryption keys and I'm just about done updating my, yet to be released, packer/unpacker with these new encryption/obfuscation methods. Although, like I said, I'm taking it slow. Gimmie some time.

Thank you so much for looking into this, Geo! Really appreciate your hard work. Take your time, I'll be eagerly waiting for your update!

[Geo]

Take your time, I'll be eagerly waiting for your update!

Just a small update in regards to my progress. I've decrypted and unpacked the files, edited, repacked and encrypted them, and successfully the launched the game directly from "Fallen.exe" without issue. Simply loading the offline save data directly didn't work, presumably due to its IDs being verified online.

So, I decided to create a new game, save it so their server accepts and records the new IDs, copied the newly cached online save data, decoded it, and copied the new IDs into my offline save file. I suppose just grabbing the IDs through my Cheat Table would also suffice. I then attempted what I initially planned to do and forcibly loaded the offline save file, after modifying it with the new IDs. The server did some checks and the game asked me to restart my game, so I launched it through the launcher, resetting all files back to normal, and the game let me in with my old data uploaded to their server.

From a quick test, it looks like my cheated 40K+ pontos can be used without issue.

These excessive obfuscation methods really show some level of incompetence and, with their website being AI vibe coded, I have a suspicion they AI vibe coded this online security update as well. While it looks more difficult on the surface, it's seemingly more exploitable.

[mysterd]

Take your time, I'll be eagerly waiting for your update!

Just a small update in regards to my progress. I've decrypted and unpacked the files, edited, repacked and encrypted them, and successfully the launched the game directly from "Fallen.exe" without issue. Simply loading the offline save data directly didn't work, presumably due to its IDs being verified online.

So, I decided to create a new game, save it so their server accepts and records the new IDs, copied the newly cached online save data, decoded it, and copied the new IDs into my offline save file. I suppose just grabbing the IDs through my Cheat Table would also suffice. I then attempted what I initially planned to do and forcibly loaded the offline save file, after modifying it with the new IDs. The server did some checks and the game asked me to restart my game, so I launched it through the launcher, resetting all files back to normal, and the game let me in with my old data uploaded to their server.

From a quick test, it looks like my cheated 40K+ pontos can be used without issue.

These excessive obfuscation methods really show some level of incompetence and, with their website being AI vibe coded, I have a suspicion they AI vibe coded this online security update as well. While it looks more difficult on the surface, it's seemingly more exploitable.

Great update! Really relieved that the old save file can still be used. I was afraid of losing all my progress, and I’ve actually been enjoying this game quite a bit. It seems like vibe coding is getting way more common than it looks! Huge thanks for all your hard work on this!