All the data can be yours: reverse engineering APIs