SLDLS¶

This server is responsable for dynamic background and game api url information.

The endpoint seems like is supports more games than BF, rather than the original one (which used Dynamic_background.php) which serves a similar purpose.

The game checks if this server is HTTPS and the CA certificate matches the one of the game server.

URL: https://api-sl.bfww.gumi.sg/

Request: /dls¶

Type: GET

The DLS request accepts and returns a JSON object called “SREE”, the format of the request and the response, therefore, it’s the same, what changes is the encrypted content of the SREE.

Request and response format:

{
	"SREE": "content"
}

The content of SREE is encrypted with AES-CBC and the content is then encoded with Base64.

AES key: 7410958164354871

AES IV: Bfw4encrypedPass

The content of a decrypted SREE as follows:

{
	(todo...)
}