Sim Theme Park/Theme Park World Online Functions

no files, since I simply want the LoginServer to at least accept the connection atm.

I tried logging packets with RawCap, but it's not picking any up, this game probably doesn't use packets for the LoginServer (Obviously....)

EDIT: I got 58 packets all of a sudden...
Ahh, of course. I'll try Wireshark or RawCap, see what gets logged!
 
no files, since I simply want the LoginServer to at least accept the connection atm.

I tried logging packets with RawCap, but it's not picking any up, this game probably doesn't use packets for the LoginServer (Obviously....)

EDIT: I got 58 packets all of a sudden, but it never dumped it to the file? Anyway, the LoginServer doesn't use packets, so we kind of don't know how to progress but with the .dlls.

hang on, this dll must be custom, since when I put it into the .zip, it did this:
View attachment 610
That's strange. And we also have trial and error, don't forget that :p
 
Code:
3E 00 00 50 61 72 61 67 75 61 79 00 00 00 00 55 72 75 67 75 61 79 00 43 68 69 6C 65 00 00 00 45 63 75 61 64 6F 72 00 41 72 67 65 6E 74 69 6E 61 00 00 00 50 65 72 75 00 00 00 00 43 6F 6C 6F 6D 62 69 61 00 00 00 00 56 65 6E 65 7A 75 65 6C 61 00 00 00 44 6F 6D 69 6E 69 63 61 6E 20 52 65 70 75 62 6C 69 63 00 00 53 6F 75 74 68 20 41 66 72 69 63 61 00 00 00 00 50 61 6E 61 6D 61 00 00 4C 75 78 65 6D 62 6F 75 72 67 00 00 43 6F 73 74 61 20 52 69 63 61 00 00 53 77 69 74 7A 65 72 6C 61 6E 64 00 47 75 61 74 65 6D 61 6C 61 00 00 00 43 61 6E 61 64 61 00 00 53 70 61 6E 69 73 68 20 2D 20 4D 6F 64 65 72 6E 20 53 6F 72 74 00 00 00 41 75 73 74 72 61 6C 69 61 00 00 00 45 6E 67 6C 69 73 68 00 41 75 73 74 72 69 61 00 47 65 72 6D 61 6E 00 00 42 65 6C 67 69 75 6D 00 4D 65 78 69 63 6F 00 00 53 70 61 6E 69 73 68 00 42 61 73 71 75 65 00 00 53 77 65 64 65 6E 00 00 53 77 65 64 69 73 68 00 49 63 65 6C 61 6E 64 00 49 63 65 6C 61 6E 64 69 63 00 00 00 46 72 61 6E 63 65 00 00 46 72 65 6E 63 68 00 00 46 69 6E 6C 61 6E 64 00 46 69 6E 6E 69 73 68 00 53 70 61 69 6E 00 00 00 53 70 61 6E 69 73 68 20 2D 20 54 72 61 64 69 74 69 6F 6E 61 6C 20 53 6F 72 74 00 00 75 6E 69 74 65 64 2D 73 74 61 74 65 73 00 00 00 75 6E 69 74 65 64 2D 6B 69 6E 67 64 6F 6D 00 00 74 72 69 6E 69 64 61 64 20 26 20 74 6F 62 61 67 6F 00 00 00 73 6F 75 74 68 2D 6B 6F 72 65 61 00 73 6F 75 74 68 2D 61 66 72 69 63 61 00 00 00 00 73 6F 75 74 68 20 6B 6F 72 65 61 00 73 6F 75 74 68 20 61 66 72 69 63 61 00 00 00 00 73 6C 6F 76 61 6B 00 00 70 75 65 72 74 6F 2D 72 69 63 6F 00 70 72 2D 63 68 69 6E 61 00 00 00 00 70 72 20 63 68 69 6E 61 00 00 00 00 6E 7A 00 00 6E 65 77 2D 7A 65 61 6C 61 6E 64 00 68 6F 6E 67 2D 6B 6F 6E 67 00 00 00 68 6F 6C 6C 61 6E 64 00 67 72 65 61 74 20 62 72 69 74 61 69 6E 00 00 00 65 6E 67 6C 61 6E 64 00 63 7A 65 63 68 00 00 00 63 68 69 6E 61 00 00 00 62 72 69 74 61 69 6E 00 61 6D 65 72 69 63 61 00 75 73 61 00 75 73 00 00 75 6B 00 00 73 77 69 73 73 00 00 00 73 77 65 64 69 73 68 2D 66 69 6E 6C 61 6E 64 00 73 70 61 6E 69 73 68 2D 76 65 6E 65 7A 75 65 6C 61 00 00 00 73 70 61 6E 69 73 68 2D 75 72 75 67 75 61 79 00 73 70 61 6E 69 73 68 2D 70 75 65 72 74 6F 20 72 69 63 6F 00 73 70 61 6E 69 73 68 2D 70 65 72 75 00 00 00 00 73 70 61 6E 69 73 68 2D 70 61 72 61 67 75 61 79 00 00 00 00 73 70 61 6E 69 73 68 2D 70 61 6E 61 6D 61 00 00 73 70 61 6E 69 73 68 2D 6E 69 63 61 72 61 67 75 61 00 00 00 73 70 61 6E 69 73 68 2D 6D 6F 64 65 72 6E 00 00 73 70 61 6E 69 73 68 2D 6D 65 78 69 63 61 6E 00 73 70 61 6E 69 73 68 2D 68 6F 6E 64 75 72 61 73 00 00 00 00 73 70 61 6E 69 73 68 2D 67 75 61 74 65 6D 61 6C 61 00 00 00 73 70 61 6E 69 73 68 2D 65 6C 20 73 61 6C 76 61 64 6F 72 00 73 70 61 6E 69 73 68 2D 65 63 75 61 64 6F 72 00 73 70 61 6E 69 73 68 2D 64 6F 6D 69 6E 69 63 61 6E 20 72 65 70 75 62 6C 69 63 00 00 73 70 61 6E 69 73 68 2D 63 6F 73 74 61 20 72 69 63 61 00 00 73 70 61 6E 69 73 68 2D 63 6F 6C 6F 6D 62 69 61 00 00 00 00 73 70 61 6E 69 73 68 2D 63 68 69 6C 65 00 00 00 73 70 61 6E 69 73 68 2D 62 6F 6C 69 76 69 61 00 73 70 61 6E 69 73 68 2D 61 72 67 65 6E 74 69 6E 61 00 00 00 70 6F 72 74 75 67 75 65 73 65 2D 62 72 61 7A 69 6C 69 61 6E 00 00 00 00 6E 6F 72 77 65 67 69 61 6E 2D 6E 79 6E 6F 72 73 6B 00 00 00 6E 6F 72 77 65 67 69 61 6E 2D 62 6F 6B 6D 61 6C 00 00 00 00 6E 6F 72 77 65 67 69 61 6E 00 00 00 69 74 61 6C 69 61 6E 2D 73 77 69 73 73 00 00 00 69 72 69 73 68 2D 65 6E 67 6C 69 73 68 00 00 00 67 65 72 6D 61 6E 2D 73 77 69 73 73 00 00 00 00 67 65 72 6D 61 6E 2D 6C 75 78 65 6D 62 6F 75 72 67 00 00 00 67 65 72 6D 61 6E 2D 6C 69 63 68 74 65 6E 73 74 65 69 6E 00 67 65 72 6D 61 6E 2D 61 75 73 74 72 69 61 6E 00 66 72 65 6E 63 68 2D 73 77 69 73 73 00 00 00 00 66 72 65 6E 63 68 2D 6C 75 78 65 6D 62 6F 75 72 67 00 00 00 66 72 65 6E 63 68 2D 63 61 6E 61 64 69 61 6E 00 66 72 65 6E 63 68 2D 62 65 6C 67 69 61 6E 00 00 65 6E 67 6C 69 73 68 2D 75 73 61 00 65 6E 67 6C 69 73 68 2D 75 73 00 00 65 6E 67 6C 69 73 68 2D 75 6B 00 00 65 6E 67 6C 69 73 68 2D 74 72 69 6E 69 64 61 64 20 79 20 74 6F 62 61 67 6F 00 00 00 65 6E 67 6C 69 73 68 2D 73 6F 75 74 68 20 61 66 72 69 63 61 00 00 00 00 65 6E 67 6C 69 73 68 2D 6E 7A 00 00 65 6E 67 6C 69 73 68 2D 6A 61 6D 61 69 63 61 00 65 6E 67 6C 69 73 68 2D 69 72 65 00 65 6E 67 6C 69 73 68 2D 63 61 72 69 62 62 65 61 6E 00 00 00 65 6E 67 6C 69 73 68 2D 63 61 6E 00 65 6E 67 6C 69 73 68 2D 62 65 6C 69 7A 65 00 00 65 6E 67 6C 69 73 68 2D 61 75 73 00 65 6E 67 6C 69 73 68 2D 61 6D 65 72 69 63 61 6E 00 00 00 00 64 75 74 63 68 2D 62 65 6C 67 69 61 6E 00 00 00 63 68 69 6E 65 73 65 2D 74 72 61 64 69 74 69 6F 6E 61 6C 00 63 68 69 6E 65 73 65 2D 73 69 6E 67 61 70 6F 72 65 00 00 00 63 68 69 6E 65 73 65 2D 73 69 6D 70 6C 69 66 69 65 64 00 00 63 68 69 6E 65 73 65 2D 68 6F 6E 67 6B 6F 6E 67 00 00 00 00 63 68 69 6E 65 73 65 00 63 68 69 00 63 68 68 00 63 61 6E 61 64 69 61 6E 00 00 00 00 62 65 6C 67 69 61 6E 00 61 75 73 74 72 61 6C 69 61 6E 00 00 61 6D 65 72 69 63 61 6E 2D 65 6E 67 6C 69 73 68 00 00 00 00 61 6D 65 72 69 63 61 6E 20 65 6E 67 6C 69 73 68 00 00 00 00 61 6D 65 72 69 63 61 6E 00 00 00 00 53 75 6E 4D 6F 6E 54 75 65 57 65 64 54 68 75 46 72 69 53 61 74 00 00 00 4A 61 6E 46 65 62 4D 61 72 41 70 72 4D 61 79 4A 75 6E 4A 75 6C 41 75 67 53 65 70 4F 63 74 4E 6F 76 44 65 63 00 00 00 00 47 65 74 4C 61 73 74 41 63 74 69 76 65 50 6F 70 75 70 00 00 47 65 74 41 63 74 69 76 65 57 69 6E 64 6F 77 00 4D 65 73 73 61 67 65 42 6F 78 41 00 75 73 65 72 33 32 2E 64 6C 6C 00 00 48 3A 6D 6D 3A 73 73 00 64 64 64 64 2C 20 4D 4D 4D 4D 20 64 64 2C 20 79 79 79 79 00 4D 2F 64 2F 79 79 00 00 50 4D 00 00 41 4D 00 00 44 65 63 65 6D 62 65 72 00 00 00 00 4E 6F 76 65 6D 62 65 72 00 00 00 00 4F 63 74 6F 62 65 72 00 53 65 70 74 65 6D 62 65 72 00 00 00 41 75 67 75 73 74 00 00 4A 75 6C 79 00 00 00 00 4A 75 6E 65 00 00 00 00 41 70 72 69 6C 00 00 00 4D 61 72 63 68 00 00 00 46 65 62 72 75 61 72 79 00 00 00 00 4A 61 6E 75 61 72 79 00 44 65 63 00 4E 6F 76 00 4F 63 74 00 53 65 70 00 41 75 67 00 4A 75 6C 00 4A 75 6E 00 4D 61 79 00 41 70 72 00 4D 61 72 00 46 65 62 00 4A 61 6E 00 53 61 74 75 72 64 61 79 00 00 00 00 46 72 69 64 61 79 00 00 54 68 75 72 73 64 61 79 00 00 00 00 57 65 64 6E 65 73 64 61 79 00 00 00 54 75 65 73 64 61 79 00 4D 6F 6E 64 61 79 00 00 53 75 6E 64 61 79 00 00 53 61 74 00 46 72 69 00 54 68 75 00 57 65 64 00 54 75 65 00 4D 6F 6E 00 53 75 6E

If you convert that to text, you'll see that there's languages and also the date, I think we need to respond with this, but we don't have any data :p
This is where my Hex2Ascii program actually comes in useful, apart from S2PE.
So the client sends that, therefore it's probably asking for something from that list in that order. Personally I would probably try sending a blank packet containing 3F, since that's just after 3E and is probably, therefore, the response. Otherwise, I'd try and see what it's waiting for using OllyDbg or whatever debugger would work best for doing that; trial and error!
 
That's strange. And we also have trial and error, don't forget that :p
it DOES send packets, and I sent one to niotso.org as the LoginServer, and it does this in wireshark...
00 1F 33 8C E9 10 18 67 B0 69 0E FC 08 00 45 00 00 38 4C AA 00 00 80 11 6C B1 C0 A8 00 08 C0 A8 00 01 FC C7 00 35 00 24 7C 7F DA 05 01 00 00 01

80 is set as the "Time to Live"
All checksums are set to Bad, and they're set to false.
 
Code:
00 1F 33 8C E9 10 18 67 B0 69 0E FC 08 00 45 00 00 38 4C AA 00 00 80 11 6C B1 C0 A8 00 08 C0 A8 00 01 FC C7 00 35 00 24 7C 7F DA 05 01 00 00 01
=
Code:
3Œég°iüE8Lª€l±À¨À¨üÇ5$|Ú
Weird.
 
Code:
00 1F 33 8C E9 10 18 67 B0 69 0E FC 08 00 45 00 00 38 4C AA 00 00 80 11 6C B1 C0 A8 00 08 C0 A8 00 01 FC C7 00 35 00 24 7C 7F DA 05 01 00 00 01
=
Code:
3Œég°iüE8Lª€l±À¨À¨üÇ5$|Ú
Weird.
In that code, it says niotso.org is the server.
Wireshark also states that the Protocol is DNS.
I DID get something back I think, it sent back/forward a bigger packet.
I got a standard query response.
 
lol, well, what do you think we send? Obviously the login info. But WHY on earth is the game imminently disconnecting from localhost???
...Wouldn't we send a success packet now that we've managed to log in, regardless of what the username and password are (for test purposes)?
 
...Wouldn't we send a success packet now that we've managed to log in, regardless of what the username and password are (for test purposes)?
the game DOESN'T let you login, it freezes, and then unfreezes, which then sends the packet in between and does nothing.
The game uses a DNS protocol, connecting to the original servers gave you an error because of a DNS lookup failure, localhost disconnected you in a split-second, and niotso.org does nothing except tell the game what it is.
 
Last edited:
the game DOESN'T let you login, it freezes, and then unfreezes, which then sends the packet in between.
The game uses a DNS protocol, connecting to the original servers gave you an error because of a DNS lookup failure, localhost disconnected you in a split-second, and niotso.org does nothing except tell the game what it is.
Mmk. Sounds like a one-liner but I'll roll with it.
 
the game DOESN'T let you login, it freezes, and then unfreezes, which then sends the packet in between and does nothing.
The game uses a DNS protocol, connecting to the original servers gave you an error because of a DNS lookup failure, localhost disconnected you in a split-second, and niotso.org does nothing except tell the game what it is.
I added a LoginServer folder and .html file, now the game waits more than a split second :p but it's not nearly a full second.
 
Back
Top