You can also just hook the process in the real time to bypass it. Going out on a limb here, they most likely HMAC sign their requests using a secret key embedd

You can also just hook the process in the real time to bypass it. Going out on a limb here, they most likely HMAC sign their requests using a secret key embedded in the application, so you'd have to reverse that too.