Primer paso de la investigacion. Se aportan el .apk, las carpetas con el apk extraido y el apk descompilado. El archivo API_DOCUMENTATION.md es un archivo donde se anotaran los descubrimientos del funcionamiento de la API, y los .py son scripts para probar la funcionalidad de la API con los métodos que vayamos encontrando. Finalmente, los archivos .js son scripts de Frida para extraer informacion de la APP durante la ejecucion.

apk_decompiled/sources/O1/a.java

@@ -0,0 +1,40 @@
+package O1;
+
+import android.widget.CompoundButton;
+import com.adif.elcanomovil.uiAvisa.components.create.NewIssueFragment;
+import com.adif.elcanomovil.uiSubscriptions.viewholder.SubscriptionViewHolder;
+import com.google.android.material.chip.Chip;
+
+/* loaded from: classes3.dex */
+public final /* synthetic */ class a implements CompoundButton.OnCheckedChangeListener {
+
+    /* renamed from: a, reason: collision with root package name */
+    public final /* synthetic */ int f1317a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ Object f1318b;
+
+    public /* synthetic */ a(Object obj, int i) {
+        this.f1317a = i;
+        this.f1318b = obj;
+    }
+
+    @Override // android.widget.CompoundButton.OnCheckedChangeListener
+    public final void onCheckedChanged(CompoundButton compoundButton, boolean z3) {
+        switch (this.f1317a) {
+            case 0:
+                SubscriptionViewHolder.b((SubscriptionViewHolder) this.f1318b, compoundButton, z3);
+                return;
+            case 1:
+                NewIssueFragment.m((NewIssueFragment) this.f1318b, compoundButton, z3);
+                return;
+            default:
+                CompoundButton.OnCheckedChangeListener onCheckedChangeListener = ((Chip) this.f1318b).i;
+                if (onCheckedChangeListener != null) {
+                    onCheckedChangeListener.onCheckedChanged(compoundButton, z3);
+                    return;
+                }
+                return;
+        }
+    }
+}

apk_decompiled/sources/O1/b.java

@@ -0,0 +1,57 @@
+package O1;
+
+import kotlin.Unit;
+import kotlin.jvm.functions.Function0;
+import kotlin.jvm.internal.Lambda;
+
+/* loaded from: classes3.dex */
+public final class b extends Lambda implements Function0 {
+
+    /* renamed from: b, reason: collision with root package name */
+    public static final b f1319b = new b(0, 0);
+
+    /* renamed from: c, reason: collision with root package name */
+    public static final b f1320c = new b(0, 1);
+
+    /* renamed from: d, reason: collision with root package name */
+    public static final b f1321d = new b(0, 2);
+
+    /* renamed from: e, reason: collision with root package name */
+    public static final b f1322e = new b(0, 3);
+
+    /* renamed from: f, reason: collision with root package name */
+    public static final b f1323f = new b(0, 4);
+
+    /* renamed from: g, reason: collision with root package name */
+    public static final b f1324g = new b(0, 5);
+    public static final b h = new b(0, 6);
+
+    /* renamed from: a, reason: collision with root package name */
+    public final /* synthetic */ int f1325a;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public /* synthetic */ b(int i, int i4) {
+        super(i);
+        this.f1325a = i4;
+    }
+
+    @Override // kotlin.jvm.functions.Function0
+    public final /* bridge */ /* synthetic */ Object invoke() {
+        switch (this.f1325a) {
+            case 0:
+                return Unit.INSTANCE;
+            case 1:
+                return Unit.INSTANCE;
+            case 2:
+                return Unit.INSTANCE;
+            case 3:
+                return Unit.INSTANCE;
+            case 4:
+                return Unit.INSTANCE;
+            case 5:
+                return Unit.INSTANCE;
+            default:
+                return Unit.INSTANCE;
+        }
+    }
+}