Primer paso de la investigacion. Se aportan el .apk, las carpetas con el apk extraido y el apk descompilado. El archivo API_DOCUMENTATION.md es un archivo donde se anotaran los descubrimientos del funcionamiento de la API, y los .py son scripts para probar la funcionalidad de la API con los métodos que vayamos encontrando. Finalmente, los archivos .js son scripts de Frida para extraer informacion de la APP durante la ejecucion.

apk_decompiled/sources/q3/b.java

@@ -0,0 +1,67 @@
+package q3;
+
+import java.security.cert.X509Certificate;
+import java.util.Iterator;
+import java.util.LinkedHashMap;
+import java.util.LinkedHashSet;
+import java.util.Set;
+import javax.security.auth.x500.X500Principal;
+import kotlin.jvm.internal.Intrinsics;
+
+/* loaded from: classes3.dex */
+public final class b implements d {
+
+    /* renamed from: a, reason: collision with root package name */
+    public final LinkedHashMap f8191a;
+
+    public b(X509Certificate... caCerts) {
+        Intrinsics.checkNotNullParameter(caCerts, "caCerts");
+        LinkedHashMap linkedHashMap = new LinkedHashMap();
+        for (X509Certificate x509Certificate : caCerts) {
+            X500Principal subjectX500Principal = x509Certificate.getSubjectX500Principal();
+            Intrinsics.checkNotNullExpressionValue(subjectX500Principal, "caCert.subjectX500Principal");
+            Object obj = linkedHashMap.get(subjectX500Principal);
+            if (obj == null) {
+                obj = new LinkedHashSet();
+                linkedHashMap.put(subjectX500Principal, obj);
+            }
+            ((Set) obj).add(x509Certificate);
+        }
+        this.f8191a = linkedHashMap;
+    }
+
+    @Override // q3.d
+    public final X509Certificate a(X509Certificate cert) {
+        Intrinsics.checkNotNullParameter(cert, "cert");
+        Set set = (Set) this.f8191a.get(cert.getIssuerX500Principal());
+        Object obj = null;
+        if (set == null) {
+            return null;
+        }
+        Iterator it = set.iterator();
+        while (true) {
+            if (!it.hasNext()) {
+                break;
+            }
+            Object next = it.next();
+            try {
+                cert.verify(((X509Certificate) next).getPublicKey());
+                obj = next;
+                break;
+            } catch (Exception unused) {
+            }
+        }
+        return (X509Certificate) obj;
+    }
+
+    public final boolean equals(Object obj) {
+        if (obj != this) {
+            return (obj instanceof b) && Intrinsics.areEqual(((b) obj).f8191a, this.f8191a);
+        }
+        return true;
+    }
+
+    public final int hashCode() {
+        return this.f8191a.hashCode();
+    }
+}