[Forensics] Marshal in the Middle

i found the Api_post_code in the wireshark,but how to find the flag?