SilicaAndPina
Active member
- Joined
- Sep 1, 2019
- Messages
- 33
- Reaction score
- 77
Oh boy Dream Town, this was a fun one first i would like to thank @Alex Grigoriou as he had downloaded all the Dream Town files before it went down, basically making this whole thing possible.
But anyway you can play dream town @ https://famita.ml/friends/index.html
Registering and Login saving stuff works, however codes for the actural Tamagotchi Friends dont (yet),
If you have any problems please tell me so i can try fix it- im not entirely sure i rewrote every single script soo
Technical notes (for nerds):
This game might have not been developed by Bandai but rather outsourced to "Firma Studio" as all packages are marked "com.firmastudio" - interestingly firmastudio.com seems to be an architexture company not a game development one, now granted it is Dream TOWN but i dont think it falls under
*.CEBD file format - there is only 1 SWF file acturally loaded by this, which is the loader itself. which loads other binaries and config files in the .CEBD file, which is compressed (gZIP) & encrypted (ARC4) SWF or XML files the main config file is called "mmog.cebd" which is XML and defines stuff like the login server and stuff. and the main binary is "tam.cebd" which is a SWF, i wrote a CEBD decryptor in C# .NET which you can find the src and binaries for here: Cebd_Decrypt
its also built with the Starling Engine, the login server is default over unsecured HTTP (infact, it pretty much HAS to be over HTTP since it expects a direct IP and not a domain name, i think SSL on IP's is possible but you cant do it with Let's Encrypt ..), oh and the original server stored passwords in plaintext, when you did a "i forgot my pass" thing it would just give you your password. i acturally set mine up to do SHA512(password)^salt the password reset merely creates a new password for you and tells you that instead. :-:
It was totallllly possible to cheat dream town (even the original one,) basically whenever you do anything it sends a request to the auth server (defined in mmog.cebd) basically you can just POST to <authserver>/inventory/add with a JSON like {"itemId":1,"quantity":4,"authId":<token>} and it just adds it to your inventory.
Anyway, you can find the CGI scripts code for the login server here: DreamTown Repository, and the Client Files
But anyway you can play dream town @ https://famita.ml/friends/index.html
Registering and Login saving stuff works, however codes for the actural Tamagotchi Friends dont (yet),
If you have any problems please tell me so i can try fix it- im not entirely sure i rewrote every single script soo
Technical notes (for nerds):
This game might have not been developed by Bandai but rather outsourced to "Firma Studio" as all packages are marked "com.firmastudio" - interestingly firmastudio.com seems to be an architexture company not a game development one, now granted it is Dream TOWN but i dont think it falls under
*.CEBD file format - there is only 1 SWF file acturally loaded by this, which is the loader itself. which loads other binaries and config files in the .CEBD file, which is compressed (gZIP) & encrypted (ARC4) SWF or XML files the main config file is called "mmog.cebd" which is XML and defines stuff like the login server and stuff. and the main binary is "tam.cebd" which is a SWF, i wrote a CEBD decryptor in C# .NET which you can find the src and binaries for here: Cebd_Decrypt
its also built with the Starling Engine, the login server is default over unsecured HTTP (infact, it pretty much HAS to be over HTTP since it expects a direct IP and not a domain name, i think SSL on IP's is possible but you cant do it with Let's Encrypt ..), oh and the original server stored passwords in plaintext, when you did a "i forgot my pass" thing it would just give you your password. i acturally set mine up to do SHA512(password)^salt the password reset merely creates a new password for you and tells you that instead. :-:
It was totallllly possible to cheat dream town (even the original one,) basically whenever you do anything it sends a request to the auth server (defined in mmog.cebd) basically you can just POST to <authserver>/inventory/add with a JSON like {"itemId":1,"quantity":4,"authId":<token>} and it just adds it to your inventory.
Anyway, you can find the CGI scripts code for the login server here: DreamTown Repository, and the Client Files
Last edited by a moderator: