decided to write bots for the andriod/iphone game "avatarfight" rofl
currently raped most of their protocol. only need to figure out how they generate their response to battles which are sent to update_rcd and then some basic mining/guild addons.
everything's json with url encode. i think they salt their md5 password hashes though i give those chinese devs props for that.
heres what i found so far. all of this needs to be sent with the proper cookie data which you receive after logon to keep the session alive.
i dont know how the fuck they generate that response at the end. i think i can just input the stats and names in the response and leave the rest along and it would work. we shall see later though.
Code
//login sample
{"PWD":"xxx","VER":"3.5.0","OS":2,"NAME":"abduct","DEV":"353285041710237","TS":1342225034131,"LANG":"en"}
//get oppenents
ACT=0&CTT={"TS":1342233547465,"CNT":24}
//returns long json string with stats and names
//the json string to be sent to update_rcd which i dont understand
ACT=2&CTT={"TS":1342233599301,"RSLT":{"ATKNM":"abduct","DSKN":1,"DEFHP":["1053","1254","752","627"],"DEF":["agpzfmF2YWZpZ2h0cg8LEgZBdmF0YXIYqaCfHww","17","19","9"],"RTYPE":1,"DEFEX":[{"HP":1598,"NAME":"lordsergio","KEY":"agpzfmF2YWZpZ2h0cg8LEgZBdmF0YXIYqtaaaww","SKN":10,"TYPE":3}],"LST":[{"A":20,"R":"a_0"},{"P":"20","A":2,"R":"a_0"},{"A":20,"R":"a_1"},{"A":20,"R":"a_2"},{"A":20,"R":"a_3"},{"A":20,"R":"d_0"},{"P":"15","A":2,"R":"d_0"},{"A":20,"R":"d_1"},{"A":20,"R":"d_2"},{"A":20,"R":"d_3"},{"P":"d_0","A":4,"R":"a_2"},{"P":"156","A":10,"R":"d_0"},{"A":9,"R":"a_2"},{"P":"aa_0","A":120,"R":"a_0"},{"P":"darrowricky","A":20,"R":"aa_0"},{"P":"a_2","A":4,"R":"d_2"},{"P":"133","A":10,"R":"a_2"},{"A":9,"R":"d_2"},{"P":"220","A":2,"R":"aa_0"},{"P":"d_1","A":4,"R":"aa_0"},{"P":"248","A":10,"R":"d_1"},{"A":9,"R":"aa_0"},{"P":"d_2","A":4,"R":"a_2"},{"P":"184","A":10,"R":"d_2"},{"A":9,"R":"a_2"},{"P":"dd_0","A":120,"R":"d_0"},{"P":"lordsergio","A":20,"R":"dd_0"},{"P":"a_3","A":4,"R":"d_2"},{"P":"285","A":10,"R":"a_3"},{"A":9,"R":"d_2"},{"P":"d_1","A":4,"R":"a_1"},{"P":"294","A":10,"R":"d_1"},{"A":9,"R":"a_1"},{"A":119,"R":"a_0"},{"P":"331","A":10,"R":"d_1"},{"P":"214","A":10,"R":"dd_0"},{"P":"346","A":10,"R":"d_2"},{"P":"262","A":10,"R":"d_0"},{"P":"15","A":22,"R":"d_0"},{"P":"349","A":10,"R":"d_3"},{"P":"a_1","A":4,"R":"d_1"},{"P":"216","A":10,"R":"a_1"},{"A":9,"R":"d_1"},{"P":"15","A":2,"R":"dd_0"},{"A":119,"R":"dd_0"},{"P":"189","A":10,"R":"aa_0"},{"P":"271","A":10,"R":"a_2"},{"P":"162","A":10,"R":"a_0"},{"P":"20","A":22,"R":"a_0"},{"P":"485","A":10,"R":"a_3"},{"P":"228","A":10,"R":"a_1"},{"P":"dd_0","A":4,"R":"aa_0"},{"P":"189","A":10,"R":"dd_0"},{"A":9,"R":"aa_0"},{"P":"d_0","A":4,"R":"a_2"},{"P":"114","A":10,"R":"d_0"},{"A":9,"R":"a_2"},{"P":"aa_0","A":4,"R":"d_2"},{"P":"84","A":10,"R":"aa_0"},{"A":9,"R":"d_2"},{"P":"17","A":2,"R":"d_0"},{"P":"a_0","A":4,"R":"d_0"},{"P":"116","A":10,"R":"a_0"},{"A":9,"R":"d_0"},{"P":"18","A":2,"R":"a_0"},{"P":"d_3","A":4,"R":"a_0"},{"P":"280","A":10,"R":"d_3"},{"A":12,"R":"d_3"},{"A":9,"R":"a_0"},{"P":"d_2","A":118,"R":"aa_0"},{"A":19,"R":"d_2"},{"P":"d_2","A":4,"R":"a_3"},{"P":"393","A":10,"R":"d_2"},{"A":12,"R":"d_2"},{"A":9,"R":"a_3"},{"A":15,"R":"dd_0"},{"P":"178","A":10,"R":"a_1"},{"P":"139","A":10,"R":"aa_0"},{"P":"220","A":22,"R":"aa_0"},{"P":"173","A":10,"R":"a_2"},{"P":"115","A":10,"R":"a_0"},{"P":"324","A":10,"R":"a_3"},{"P":"d_0","A":4,"R":"a_1"},{"P":"183","A":10,"R":"d_0"},{"A":9,"R":"a_1"},{"P":"118","A":2,"R":"aa_0"},{"P":"dd_0","A":116,"R":"aa_0"},{"A":18,"R":"dd_0"},{"A":21,"R":"aa_0"},{"P":"d_1","A":4,"R":"a_2"},{"P":"160","A":10,"R":"d_1"},{"A":9,"R":"a_2"},{"P":"a_2","A":4,"R":"d_1"},{"P":"236","A":10,"R":"a_2"},{"A":9,"R":"d_1"},{"P":"d_0","A":4,"R":"a_0"},{"P":"a_0","A":8,"R":"d_0"},{"A":13,"R":"d_0"},{"P":"246","A":10,"R":"a_0"},{"P":"18","A":22,"R":"a_0"},{"A":9,"R":"a_0"},{"P":"a_1","A":4,"R":"d_0"},{"P":"148","A":10,"R":"a_1"},{"A":9,"R":"d_0"},{"P":"d_0","A":4,"R":"a_2"},{"A":5,"R":"d_0"},{"A":9,"R":"a_2"},{"P":"14","A":2,"R":"a_0"},{"P":"dd_0","A":107,"R":"a_0"},{"P":"257","A":10,"R":"dd_0"},{"P":"d_1","A":4,"R":"a_1"},{"P":"252","A":10,"R":"d_1"},{"A":12,"R":"d_1"},{"A":9,"R":"a_1"},{"P":"a_0","A":107,"R":"d_0"},{"A":13,"R":"d_0"},{"P":"412","A":10,"R":"a_0"},{"P":"dd_0","A":4,"R":"a_3"},{"P":"325","A":10,"R":"dd_0"},{"A":17,"R":"dd_0"},{"A":9,"R":"a_3"},{"A":117,"R":"a_0"},{"P":"164","A":10,"R":"dd_0"},{"P":"15","A":22,"R":"dd_0"},{"P":"158","A":10,"R":"d_0"},{"P":"d_0","A":4,"R":"a_2"},{"A":5,"R":"d_0"},{"A":9,"R":"a_2"},{"P":"d_0","A":4,"R":"a_1"},{"P":"160","A":10,"R":"d_0"},{"A":9,"R":"a_1"},{"P":"18","A":2,"R":"dd_0"},{"P":"a_3","A":4,"R":"dd_0"},{"P":"398","A":10,"R":"a_3"},{"A":9,"R":"dd_0"},{"P":"dd_0","A":4,"R":"a_2"},{"P":"117","A":10,"R":"dd_0"},{"A":9,"R":"a_2"},{"P":"a_2","A":4,"R":"d_0"},{"P":"178","A":10,"R":"a_2"},{"A":12,"R":"a_2"},{"A":9,"R":"d_0"},{"A":15,"R":"a_0"},{"P":"112","A":10,"R":"dd_0"},{"P":"137","A":10,"R":"d_0"},{"A":101,"R":"d_0"},{"P":"d_0","A":4,"R":"a_3"},{"P":"219","A":10,"R":"d_0"},{"A":12,"R":"d_0"},{"A":9,"R":"a_3"}],"ATKEX":[{"HP":2016,"NAME":"darrowricky","KEY":"agpzfmF2YWZpZ2h0cg8LEgZBdmF0YXIY3IztQQw","SKN":4,"TYPE":3}],"DEFNM":"pair of kings","ATKHP":["1646","1372","891","1715"],"ATK":["agpzfmF2YWZpZ2h0cg8LEgZBdmF0YXIY4O_CQgw","17","19","12"],"WIN":true,"ASKN":10}}