Primer paso de la investigacion. Se aportan el .apk, las carpetas con el apk extraido y el apk descompilado. El archivo API_DOCUMENTATION.md es un archivo donde se anotaran los descubrimientos del funcionamiento de la API, y los .py son scripts para probar la funcionalidad de la API con los métodos que vayamos encontrando. Finalmente, los archivos .js son scripts de Frida para extraer informacion de la APP durante la ejecucion.

apk_decompiled/sources/z1/C0667a.java

@@ -0,0 +1,35 @@
+package z1;
+
+import com.adif.elcanomovil.serviceNetworking.pinning.PinningRemoteDataSource;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.jvm.internal.ContinuationImpl;
+import kotlin.jvm.internal.IntCompanionObject;
+
+/* renamed from: z1.a, reason: case insensitive filesystem */
+/* loaded from: classes.dex */
+public final class C0667a extends ContinuationImpl {
+
+    /* renamed from: a, reason: collision with root package name */
+    public /* synthetic */ Object f9004a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ PinningRemoteDataSource f9005b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public int f9006c;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public C0667a(PinningRemoteDataSource pinningRemoteDataSource, Continuation continuation) {
+        super(continuation);
+        this.f9005b = pinningRemoteDataSource;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Object invokeSuspend(Object obj) {
+        Object fetchJsonWithFirebaseStorage;
+        this.f9004a = obj;
+        this.f9006c |= IntCompanionObject.MIN_VALUE;
+        fetchJsonWithFirebaseStorage = this.f9005b.fetchJsonWithFirebaseStorage(this);
+        return fetchJsonWithFirebaseStorage;
+    }
+}

apk_decompiled/sources/z1/C0668b.java

@@ -0,0 +1,55 @@
+package z1;
+
+import com.adif.elcanomovil.serviceNetworking.pinning.PinningRemoteDataSource;
+import kotlin.ResultKt;
+import kotlin.Unit;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.intrinsics.IntrinsicsKt;
+import kotlin.coroutines.jvm.internal.SuspendLambda;
+import kotlin.jvm.functions.Function2;
+import kotlinx.coroutines.CoroutineScope;
+
+/* renamed from: z1.b, reason: case insensitive filesystem */
+/* loaded from: classes.dex */
+public final class C0668b extends SuspendLambda implements Function2 {
+
+    /* renamed from: a, reason: collision with root package name */
+    public int f9007a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ PinningRemoteDataSource f9008b;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public C0668b(PinningRemoteDataSource pinningRemoteDataSource, Continuation continuation) {
+        super(2, continuation);
+        this.f9008b = pinningRemoteDataSource;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Continuation create(Object obj, Continuation continuation) {
+        return new C0668b(this.f9008b, continuation);
+    }
+
+    @Override // kotlin.jvm.functions.Function2
+    public final Object invoke(Object obj, Object obj2) {
+        return ((C0668b) create((CoroutineScope) obj, (Continuation) obj2)).invokeSuspend(Unit.INSTANCE);
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Object invokeSuspend(Object obj) {
+        Object fetchJsonWithFirebaseStorage;
+        Object coroutine_suspended = IntrinsicsKt.getCOROUTINE_SUSPENDED();
+        int i = this.f9007a;
+        if (i != 0) {
+            if (i != 1) {
+                throw new IllegalStateException("call to 'resume' before 'invoke' with coroutine");
+            }
+            ResultKt.throwOnFailure(obj);
+            return obj;
+        }
+        ResultKt.throwOnFailure(obj);
+        this.f9007a = 1;
+        fetchJsonWithFirebaseStorage = this.f9008b.fetchJsonWithFirebaseStorage(this);
+        return fetchJsonWithFirebaseStorage == coroutine_suspended ? coroutine_suspended : fetchJsonWithFirebaseStorage;
+    }
+}

apk_decompiled/sources/z1/C0669c.java

@@ -0,0 +1,85 @@
+package z1;
+
+import com.adif.elcanomovil.serviceNetworking.pinning.PinningPublicKeys;
+import com.adif.elcanomovil.serviceNetworking.pinning.PinningRemoteDataSource;
+import com.adif.elcanomovil.serviceNetworking.pinning.PinningRemoteDataSourceKt;
+import java.util.List;
+import kotlin.ResultKt;
+import kotlin.Unit;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.intrinsics.IntrinsicsKt;
+import kotlin.coroutines.jvm.internal.SuspendLambda;
+import kotlin.jvm.functions.Function2;
+import kotlin.jvm.internal.Intrinsics;
+import kotlinx.coroutines.CoroutineScope;
+import kotlinx.coroutines.TimeoutKt;
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+/* renamed from: z1.c, reason: case insensitive filesystem */
+/* loaded from: classes.dex */
+public final class C0669c extends SuspendLambda implements Function2 {
+
+    /* renamed from: a, reason: collision with root package name */
+    public int f9009a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ long f9010b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final /* synthetic */ PinningRemoteDataSource f9011c;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public C0669c(long j4, PinningRemoteDataSource pinningRemoteDataSource, Continuation continuation) {
+        super(2, continuation);
+        this.f9010b = j4;
+        this.f9011c = pinningRemoteDataSource;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Continuation create(Object obj, Continuation continuation) {
+        return new C0669c(this.f9010b, this.f9011c, continuation);
+    }
+
+    @Override // kotlin.jvm.functions.Function2
+    public final Object invoke(Object obj, Object obj2) {
+        return ((C0669c) create((CoroutineScope) obj, (Continuation) obj2)).invokeSuspend(Unit.INSTANCE);
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Object invokeSuspend(Object obj) {
+        List asList;
+        List asList2;
+        Object coroutine_suspended = IntrinsicsKt.getCOROUTINE_SUSPENDED();
+        int i = this.f9009a;
+        try {
+            if (i == 0) {
+                ResultKt.throwOnFailure(obj);
+                long j4 = this.f9010b;
+                C0668b c0668b = new C0668b(this.f9011c, null);
+                this.f9009a = 1;
+                obj = TimeoutKt.withTimeout(j4, c0668b, this);
+                if (obj == coroutine_suspended) {
+                    return coroutine_suspended;
+                }
+            } else {
+                if (i != 1) {
+                    throw new IllegalStateException("call to 'resume' before 'invoke' with coroutine");
+                }
+                ResultKt.throwOnFailure(obj);
+            }
+            JSONObject jSONObject = new JSONObject((String) obj);
+            JSONArray jSONArray = jSONObject.getJSONArray("estaciones_circulacion_key");
+            Intrinsics.checkNotNullExpressionValue(jSONArray, "getJSONArray(...)");
+            asList = PinningRemoteDataSourceKt.asList(jSONArray);
+            JSONArray jSONArray2 = jSONObject.getJSONArray("elcanoweb_avisa_key");
+            Intrinsics.checkNotNullExpressionValue(jSONArray2, "getJSONArray(...)");
+            asList2 = PinningRemoteDataSourceKt.asList(jSONArray2);
+            return new PinningPublicKeys(asList, asList2);
+        } catch (Exception e4) {
+            String message = "Failed to parse public keys JSON: " + e4.getMessage();
+            Intrinsics.checkNotNullParameter(message, "message");
+            return null;
+        }
+    }
+}

apk_decompiled/sources/z1/C0670d.java

@@ -0,0 +1,36 @@
+package z1;
+
+import com.adif.elcanomovil.serviceNetworking.pinning.PinningRepository;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.jvm.internal.ContinuationImpl;
+import kotlin.jvm.internal.IntCompanionObject;
+
+/* renamed from: z1.d, reason: case insensitive filesystem */
+/* loaded from: classes.dex */
+public final class C0670d extends ContinuationImpl {
+
+    /* renamed from: a, reason: collision with root package name */
+    public PinningRepository f9012a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public /* synthetic */ Object f9013b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final /* synthetic */ PinningRepository f9014c;
+
+    /* renamed from: d, reason: collision with root package name */
+    public int f9015d;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public C0670d(PinningRepository pinningRepository, Continuation continuation) {
+        super(continuation);
+        this.f9014c = pinningRepository;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Object invokeSuspend(Object obj) {
+        this.f9013b = obj;
+        this.f9015d |= IntCompanionObject.MIN_VALUE;
+        return this.f9014c.getPins(this);
+    }
+}