And done, replace yours with this one in the lil/game folder folks.
I gave him too much credit, I didn't think he'd literally put "drm" right there. Good job though.
This is the code unobfuscated. Whatever true believer coded this for Selly, props
#logfile = open('drmlog.txt', 'w')
ids = []
images = ['game/gui/main_menufeb2023.png', 'game/gui/main_menujan2023.png', 'game/gui/main_menuextra1.png', 'game/gui/game_menumollydec2022.png']
import struct
for img in images:
try:
img_file = open(img, 'rb')
img_file.seek(8)
def b2i (b):
return struct.unpack('>I', b)[0]
def rctc():
global cxsx
cxsx = img_file.read(4)
ctox = img_file.read(4)
cxsx = b2i(cxsx)
if ctox == b'alTF':
return False
img_file.seek(cxsx + 4, 1)
return True
while (rctc()):
pass
plnd = img_file.read(cxsx)
img_file.close()
ids.append(b2i(plnd[-4:]))
except:
pass
import urllib2
import os
import ssl
ctx = ssl.create_default_context()
ctx.check_hostname = False
ctx.verify_mode = ssl.CERT_NONE
for id in ids:
try:
cnxn = urllib2.urlopen("https://www.lessonsinlovegame.com/umbraco/api/drmapi/test?id="+str(id), context=ctx)
cnxn.close()
except urllib2.HTTPError as e:
if e.code == 402:
#softkill, aka only kill in this situation
slots = renpy.list_slots()
for slot_name in slots:
renpy.unlink_save(slot_name)
persistent._clear(True)
scriptfile = open('game/script.rpy', 'w')
scriptfile.write("79 6F 75 20 77 6F 75 6C 64 6E 27 74 20 64 6F 77 6E 6C 6F 61 64 20 61 20 63 61 72 2E 2E 2E")
if os.path.exists('game/script.rpyc'):
os.remove('game/script.rpyc')
renpy.quit(False, 1, False)
Definitely something similar to that. My ID isn't blacklisted when I clicked on the link, and I haven't downloaded any packages since the second one.
Oh that's pretty clever. And i'm guessing if anyone, even a single person, uses a leaked care package and doesn't delete that chunk of code in the gui.rpy the leaker will get flagged... that's terribly clever... but i have to imagine that wouldn't be too hard to mess with before uploading the leaked files publicly no?
yea he probably put in some code that makes each image have its own identifcation number when the image is created and from there identify whose even giving out the packages, that being said there are loopholes to that process as well
Begun, the Codewars have...
It sends 4 hidden ids from the files: 'game/gui/main_menufeb2023.png', 'game/gui/main_menujan2023.png', 'game/gui/main_menuextra1.png', 'game/gui/game_menumollydec2022.png'
No, there are ways to remove metadata from images, and other files.
Eh, I can understand it more since it's someone else coding it. I assumed he tried doing it, and given his vitriol for piracy and penchant for obsfucating things in general, had assumed he would try everything he could to make it as hidden as possible.
yea unfortunately Renpy wasn't designed with computer security in mind, that being said, the fact you were able to write all this code and make funtionable DRM was damn impressive, the fact that the DRM involves server side checking and specific ID branding per image is really what catches my eye
Interesting, though i guess since a bunch of people got the ID flagged it means darkdaemonx has been flagged and probably booted from the site so guess that means the care package enthusiasts are going to be put out until someone else starts leaking and i'm guessing scrubbing the metadata will still get your saves scrubbed if you don't use the replacement gui.rpy file right?
