from what ive tried anything server sided is difficult (not impossible). However, i think making wonder cards visible would be client sided and may be possible given if there's a bypass to their server checking if app is decrypted.
Side note: I'm currently experimenting with rooted bluestacks and based on results the app really checks client to server interactions. I am also working on sending fake client execute to the server in hopes of bypassing timers, opening packs, etc.
P.S. I am using methods that are known to me and don't have the experience to take on big tasks if requested from fellow users. We all look up to the big boys including myself.