I pasted this on another forum to spark interest in this, because not many people are concerned with the game >>
For paste couple of days, I've been messing around with it to get proxy going. The most time consuming part has been getting a web debugger working. Long story short, it was a pain the a** and stupidly infuriating.
My initial approach was to figure out the outgoing/incoming calls to the app. After pinning those down, I decided to block them and see how the app behaved. For an odd reason, after black-listing it here it still manages to receive a response! The main calls which I found were to domain aihelp.net & cs30.net Upon visiting the domain, both of them seem to be irrelevant [they seem to concern with providing help desk support] to resuming the state of the game i.e coins spent, server time, etc.
I don't know how to proceed from here. I find it hard to believe a domain is managing to bypass the proxy server I set up. It is meant to pipe all traffic through the application Charles-proxy.
I've uploaded the log of the response call for the curious here , here and here
One thing I want to point out, after spending a lot of time checking through the response the application gets, I don't see anything related to pushing the account details of the user back to the application. The only check I seem to see happening is 'time-check' with the server. There wasn't anything related to sending value of your coin, gems, or in-game store purchase so far. All of it seems to be stored on client machine. But it still wants the internet connected. Any pros out there know what might be happening?