A commercial, privative Android app is suspected to use an HTTPS API to get the data it shows up. The ability to obtain this data is valuable to us, so we apply different reversing techniques to find out where this API is located and how to use it.