Primer paso de la investigacion. Se aportan el .apk, las carpetas con el apk extraido y el apk descompilado. El archivo API_DOCUMENTATION.md es un archivo donde se anotaran los descubrimientos del funcionamiento de la API, y los .py son scripts para probar la funcionalidad de la API con los métodos que vayamos encontrando. Finalmente, los archivos .js son scripts de Frida para extraer informacion de la APP durante la ejecucion.

apk_decompiled/sources/U1/a.java

@@ -0,0 +1,60 @@
+package U1;
+
+import java.nio.charset.Charset;
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.HashSet;
+import java.util.Set;
+import java.util.regex.Pattern;
+import m3.l;
+
+/* loaded from: classes3.dex */
+public final class a {
+
+    /* renamed from: c, reason: collision with root package name */
+    public static final String f1776c = l.J("hts/frbslgiggolai.o/0clgbthfra=snpoo", "tp:/ieaeogn.ogepscmvc/o/ac?omtjo_rt3");
+
+    /* renamed from: d, reason: collision with root package name */
+    public static final Set f1777d;
+
+    /* renamed from: e, reason: collision with root package name */
+    public static final a f1778e;
+
+    /* renamed from: a, reason: collision with root package name */
+    public final String f1779a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final String f1780b;
+
+    static {
+        String J = l.J("hts/frbslgigp.ogepscmv/ieo/eaybtho", "tp:/ieaeogn-agolai.o/1frlglgc/aclg");
+        String J3 = l.J("AzSCki82AwsLzKd5O8zo", "IayckHiZRO1EFl1aGoK");
+        f1777d = Collections.unmodifiableSet(new HashSet(Arrays.asList(new T1.c("proto"), new T1.c("json"))));
+        f1778e = new a(J, J3);
+    }
+
+    public a(String str, String str2) {
+        this.f1779a = str;
+        this.f1780b = str2;
+    }
+
+    public static a a(byte[] bArr) {
+        String str = new String(bArr, Charset.forName("UTF-8"));
+        if (!str.startsWith("1$")) {
+            throw new IllegalArgumentException("Version marker missing from extras");
+        }
+        String[] split = str.substring(2).split(Pattern.quote("\\"), 2);
+        if (split.length != 2) {
+            throw new IllegalArgumentException("Extra is not a valid encoded LegacyFlgDestination");
+        }
+        String str2 = split[0];
+        if (str2.isEmpty()) {
+            throw new IllegalArgumentException("Missing endpoint in CCTDestination extras");
+        }
+        String str3 = split[1];
+        if (str3.isEmpty()) {
+            str3 = null;
+        }
+        return new a(str2, str3);
+    }
+}

apk_decompiled/sources/U1/b.java

@@ -0,0 +1,22 @@
+package U1;
+
+import java.net.URL;
+
+/* loaded from: classes3.dex */
+public final class b {
+
+    /* renamed from: a, reason: collision with root package name */
+    public final int f1781a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final URL f1782b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final long f1783c;
+
+    public b(int i, URL url, long j4) {
+        this.f1781a = i;
+        this.f1782b = url;
+        this.f1783c = j4;
+    }
+}

apk_decompiled/sources/U1/c.java

@@ -0,0 +1,69 @@
+package U1;
+
+import C.w;
+import X1.h;
+import android.content.Context;
+import android.net.ConnectivityManager;
+import com.google.firebase.encoders.DataEncoder;
+import com.google.firebase.encoders.json.JsonDataEncoderBuilder;
+import f0.C0338b;
+import java.net.MalformedURLException;
+import java.net.URL;
+
+/* loaded from: classes3.dex */
+public final class c implements h {
+
+    /* renamed from: b, reason: collision with root package name */
+    public final ConnectivityManager f1785b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final Context f1786c;
+
+    /* renamed from: e, reason: collision with root package name */
+    public final C0338b f1788e;
+
+    /* renamed from: f, reason: collision with root package name */
+    public final C0338b f1789f;
+
+    /* renamed from: a, reason: collision with root package name */
+    public final DataEncoder f1784a = new JsonDataEncoderBuilder().configureWith(V1.h.f1830a).ignoreNullValues(true).build();
+
+    /* renamed from: d, reason: collision with root package name */
+    public final URL f1787d = b(a.f1776c);
+
+    /* renamed from: g, reason: collision with root package name */
+    public final int f1790g = 130000;
+
+    public c(Context context, C0338b c0338b, C0338b c0338b2) {
+        this.f1786c = context;
+        this.f1785b = (ConnectivityManager) context.getSystemService("connectivity");
+        this.f1788e = c0338b2;
+        this.f1789f = c0338b;
+    }
+
+    public static URL b(String str) {
+        try {
+            return new URL(str);
+        } catch (MalformedURLException e4) {
+            throw new IllegalArgumentException(w.z("Invalid url: ", str), e4);
+        }
+    }
+
+    /* JADX WARN: Code restructure failed: missing block: B:31:0x00a7, code lost:
+    
+        if (((V1.v) V1.v.f1868a.get(r0)) != null) goto L21;
+     */
+    /* JADX WARN: Removed duplicated region for block: B:16:0x00af  */
+    /* JADX WARN: Removed duplicated region for block: B:25:0x010a  */
+    /*
+        Code decompiled incorrectly, please refer to instructions dump.
+        To view partially-correct add '--show-bad-code' argument
+    */
+    public final W1.i a(W1.i r7) {
+        /*
+            Method dump skipped, instructions count: 290
+            To view this dump add '--comments-level debug' option
+        */
+        throw new UnsupportedOperationException("Method not decompiled: U1.c.a(W1.i):W1.i");
+    }
+}