Primer paso de la investigacion. Se aportan el .apk, las carpetas con el apk extraido y el apk descompilado. El archivo API_DOCUMENTATION.md es un archivo donde se anotaran los descubrimientos del funcionamiento de la API, y los .py son scripts para probar la funcionalidad de la API con los métodos que vayamos encontrando. Finalmente, los archivos .js son scripts de Frida para extraer informacion de la APP durante la ejecucion.

apk_decompiled/sources/C1/a.java

@@ -0,0 +1,176 @@
+package C1;
+
+import com.adif.elcanomovil.domain.entities.utils.AsyncResult;
+import com.adif.elcanomovil.domain.entities.utils.Status;
+import com.adif.elcanomovil.domain.usecases.avisa.user.RefreshAvisaUserUseCase;
+import com.adif.elcanomovil.domain.usecases.avisa.user.RegisterAvisaUserUseCase;
+import com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider;
+import kotlin.Unit;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.intrinsics.IntrinsicsKt;
+import kotlin.jvm.functions.Function0;
+import kotlinx.coroutines.flow.FlowCollector;
+
+/* loaded from: classes.dex */
+public final class a implements FlowCollector {
+
+    /* renamed from: a, reason: collision with root package name */
+    public final /* synthetic */ int f339a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ DefaultAuthenticationProvider f340b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final /* synthetic */ Function0 f341c;
+
+    public /* synthetic */ a(DefaultAuthenticationProvider defaultAuthenticationProvider, Function0 function0, int i) {
+        this.f339a = i;
+        this.f340b = defaultAuthenticationProvider;
+        this.f341c = function0;
+    }
+
+    /* JADX WARN: Code restructure failed: missing block: B:18:0x0071, code lost:
+    
+        if (((kotlinx.coroutines.flow.Flow) r7).collect(r6, r0) != r1) goto L26;
+     */
+    /* JADX WARN: Code restructure failed: missing block: B:19:0x0073, code lost:
+    
+        return r1;
+     */
+    /* JADX WARN: Code restructure failed: missing block: B:25:0x005b, code lost:
+    
+        if (r7 == r1) goto L25;
+     */
+    /* JADX WARN: Removed duplicated region for block: B:20:0x003a  */
+    /* JADX WARN: Removed duplicated region for block: B:8:0x0024  */
+    /*
+        Code decompiled incorrectly, please refer to instructions dump.
+        To view partially-correct add '--show-bad-code' argument
+    */
+    public java.lang.Object a(com.adif.elcanomovil.domain.entities.utils.AsyncResult r6, kotlin.coroutines.Continuation r7) {
+        /*
+            r5 = this;
+            boolean r0 = r7 instanceof C1.c
+            if (r0 == 0) goto L13
+            r0 = r7
+            C1.c r0 = (C1.c) r0
+            int r1 = r0.f347d
+            r2 = -2147483648(0xffffffff80000000, float:-0.0)
+            r3 = r1 & r2
+            if (r3 == 0) goto L13
+            int r1 = r1 - r2
+            r0.f347d = r1
+            goto L18
+        L13:
+            C1.c r0 = new C1.c
+            r0.<init>(r5, r7)
+        L18:
+            java.lang.Object r7 = r0.f345b
+            java.lang.Object r1 = kotlin.coroutines.intrinsics.IntrinsicsKt.getCOROUTINE_SUSPENDED()
+            int r2 = r0.f347d
+            r3 = 2
+            r4 = 1
+            if (r2 == 0) goto L3a
+            if (r2 == r4) goto L34
+            if (r2 != r3) goto L2c
+            kotlin.ResultKt.throwOnFailure(r7)
+            goto L74
+        L2c:
+            java.lang.IllegalStateException r5 = new java.lang.IllegalStateException
+            java.lang.String r6 = "call to 'resume' before 'invoke' with coroutine"
+            r5.<init>(r6)
+            throw r5
+        L34:
+            C1.a r5 = r0.f344a
+            kotlin.ResultKt.throwOnFailure(r7)
+            goto L5e
+        L3a:
+            kotlin.ResultKt.throwOnFailure(r7)
+            com.adif.elcanomovil.domain.entities.utils.Status r7 = r6.getStatus()
+            com.adif.elcanomovil.domain.entities.utils.Status r2 = com.adif.elcanomovil.domain.entities.utils.Status.LOADING
+            if (r7 == r2) goto L7e
+            com.adif.elcanomovil.domain.entities.utils.Status r6 = r6.getStatus()
+            com.adif.elcanomovil.domain.entities.utils.Status r7 = com.adif.elcanomovil.domain.entities.utils.Status.SUCCESS
+            if (r6 != r7) goto L77
+            com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider r6 = r5.f340b
+            com.adif.elcanomovil.domain.usecases.avisa.user.LoginAvisaUserUseCase r6 = com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider.access$getLoginAvisaUserUseCase$p(r6)
+            r0.f344a = r5
+            r0.f347d = r4
+            java.lang.Object r7 = r6.invoke(r0)
+            if (r7 != r1) goto L5e
+            goto L73
+        L5e:
+            kotlinx.coroutines.flow.Flow r7 = (kotlinx.coroutines.flow.Flow) r7
+            C1.b r6 = new C1.b
+            kotlin.jvm.functions.Function0 r5 = r5.f341c
+            r2 = 0
+            r6.<init>(r5, r2)
+            r5 = 0
+            r0.f344a = r5
+            r0.f347d = r3
+            java.lang.Object r5 = r7.collect(r6, r0)
+            if (r5 != r1) goto L74
+        L73:
+            return r1
+        L74:
+            kotlin.Unit r5 = kotlin.Unit.INSTANCE
+            return r5
+        L77:
+            kotlin.jvm.functions.Function0 r5 = r5.f341c
+            if (r5 == 0) goto L7e
+            r5.invoke()
+        L7e:
+            kotlin.Unit r5 = kotlin.Unit.INSTANCE
+            return r5
+        */
+        throw new UnsupportedOperationException("Method not decompiled: C1.a.a(com.adif.elcanomovil.domain.entities.utils.AsyncResult, kotlin.coroutines.Continuation):java.lang.Object");
+    }
+
+    @Override // kotlinx.coroutines.flow.FlowCollector
+    public final Object emit(Object obj, Continuation continuation) {
+        boolean z3;
+        RegisterAvisaUserUseCase registerAvisaUserUseCase;
+        RefreshAvisaUserUseCase refreshAvisaUserUseCase;
+        switch (this.f339a) {
+            case 0:
+                AsyncResult asyncResult = (AsyncResult) obj;
+                Status status = asyncResult.getStatus();
+                Status status2 = Status.ERROR;
+                Function0 function0 = this.f341c;
+                if (status == status2) {
+                    DefaultAuthenticationProvider defaultAuthenticationProvider = this.f340b;
+                    z3 = defaultAuthenticationProvider.oneTry;
+                    if (!z3) {
+                        Throwable throwable = asyncResult.getThrowable();
+                        if (throwable != null) {
+                            defaultAuthenticationProvider.oneTry = true;
+                            if (throwable instanceof R0.e) {
+                                if (((R0.e) throwable).f1410a.f6294d == 401) {
+                                    refreshAvisaUserUseCase = defaultAuthenticationProvider.refreshAvisaUserUseCase;
+                                    Object invoke = refreshAvisaUserUseCase.invoke(continuation);
+                                    if (invoke == IntrinsicsKt.getCOROUTINE_SUSPENDED()) {
+                                        return invoke;
+                                    }
+                                } else {
+                                    registerAvisaUserUseCase = defaultAuthenticationProvider.registerAvisaUserUseCase;
+                                    Object invoke2 = registerAvisaUserUseCase.invoke(continuation);
+                                    if (invoke2 == IntrinsicsKt.getCOROUTINE_SUSPENDED()) {
+                                        return invoke2;
+                                    }
+                                }
+                            } else if (function0 != null) {
+                                function0.invoke();
+                            }
+                        }
+                        return Unit.INSTANCE;
+                    }
+                }
+                if (asyncResult.getStatus() == Status.SUCCESS && function0 != null) {
+                    function0.invoke();
+                }
+                return Unit.INSTANCE;
+            default:
+                return a((AsyncResult) obj, continuation);
+        }
+    }
+}

apk_decompiled/sources/C1/b.java

@@ -0,0 +1,37 @@
+package C1;
+
+import kotlinx.coroutines.flow.FlowCollector;
+
+/* loaded from: classes.dex */
+public final class b implements FlowCollector {
+
+    /* renamed from: a, reason: collision with root package name */
+    public final /* synthetic */ int f342a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ Object f343b;
+
+    public /* synthetic */ b(Object obj, int i) {
+        this.f342a = i;
+        this.f343b = obj;
+    }
+
+    /* JADX WARN: Removed duplicated region for block: B:115:0x0253  */
+    /* JADX WARN: Removed duplicated region for block: B:121:0x0261  */
+    /* JADX WARN: Removed duplicated region for block: B:47:0x010a  */
+    /* JADX WARN: Removed duplicated region for block: B:50:0x010d  */
+    /* JADX WARN: Removed duplicated region for block: B:54:0x0134  */
+    /* JADX WARN: Removed duplicated region for block: B:55:0x0137  */
+    @Override // kotlinx.coroutines.flow.FlowCollector
+    /*
+        Code decompiled incorrectly, please refer to instructions dump.
+        To view partially-correct add '--show-bad-code' argument
+    */
+    public final java.lang.Object emit(java.lang.Object r6, kotlin.coroutines.Continuation r7) {
+        /*
+            Method dump skipped, instructions count: 746
+            To view this dump add '--comments-level debug' option
+        */
+        throw new UnsupportedOperationException("Method not decompiled: C1.b.emit(java.lang.Object, kotlin.coroutines.Continuation):java.lang.Object");
+    }
+}

apk_decompiled/sources/C1/c.java

@@ -0,0 +1,34 @@
+package C1;
+
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.jvm.internal.ContinuationImpl;
+import kotlin.jvm.internal.IntCompanionObject;
+
+/* loaded from: classes.dex */
+public final class c extends ContinuationImpl {
+
+    /* renamed from: a, reason: collision with root package name */
+    public a f344a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public /* synthetic */ Object f345b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final /* synthetic */ a f346c;
+
+    /* renamed from: d, reason: collision with root package name */
+    public int f347d;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public c(a aVar, Continuation continuation) {
+        super(continuation);
+        this.f346c = aVar;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Object invokeSuspend(Object obj) {
+        this.f345b = obj;
+        this.f347d |= IntCompanionObject.MIN_VALUE;
+        return this.f346c.a(null, this);
+    }
+}

apk_decompiled/sources/C1/d.java

@@ -0,0 +1,144 @@
+package C1;
+
+import com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider;
+import kotlin.Unit;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.jvm.internal.SuspendLambda;
+import kotlin.jvm.functions.Function0;
+import kotlin.jvm.functions.Function2;
+import kotlinx.coroutines.CoroutineScope;
+
+/* loaded from: classes.dex */
+public final class d extends SuspendLambda implements Function2 {
+
+    /* renamed from: a, reason: collision with root package name */
+    public int f348a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ DefaultAuthenticationProvider f349b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final /* synthetic */ Function0 f350c;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public d(DefaultAuthenticationProvider defaultAuthenticationProvider, Function0 function0, Continuation continuation) {
+        super(2, continuation);
+        this.f349b = defaultAuthenticationProvider;
+        this.f350c = function0;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Continuation create(Object obj, Continuation continuation) {
+        return new d(this.f349b, this.f350c, continuation);
+    }
+
+    @Override // kotlin.jvm.functions.Function2
+    public final Object invoke(Object obj, Object obj2) {
+        return ((d) create((CoroutineScope) obj, (Continuation) obj2)).invokeSuspend(Unit.INSTANCE);
+    }
+
+    /* JADX WARN: Code restructure failed: missing block: B:12:0x0085, code lost:
+    
+        if (((kotlinx.coroutines.flow.Flow) r9).collect(r1, r8) == r0) goto L33;
+     */
+    /* JADX WARN: Code restructure failed: missing block: B:19:0x0064, code lost:
+    
+        if (((kotlinx.coroutines.flow.Flow) r9).collect(r1, r8) == r0) goto L33;
+     */
+    /* JADX WARN: Code restructure failed: missing block: B:27:0x0053, code lost:
+    
+        if (r9 == r0) goto L33;
+     */
+    /* JADX WARN: Code restructure failed: missing block: B:29:0x0074, code lost:
+    
+        if (r9 == r0) goto L33;
+     */
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    /*
+        Code decompiled incorrectly, please refer to instructions dump.
+        To view partially-correct add '--show-bad-code' argument
+    */
+    public final java.lang.Object invokeSuspend(java.lang.Object r9) {
+        /*
+            r8 = this;
+            java.lang.Object r0 = kotlin.coroutines.intrinsics.IntrinsicsKt.getCOROUTINE_SUSPENDED()
+            int r1 = r8.f348a
+            com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider r2 = r8.f349b
+            kotlin.jvm.functions.Function0 r3 = r8.f350c
+            r4 = 4
+            r5 = 3
+            r6 = 2
+            r7 = 1
+            if (r1 == 0) goto L2d
+            if (r1 == r7) goto L29
+            if (r1 == r6) goto L25
+            if (r1 == r5) goto L21
+            if (r1 != r4) goto L19
+            goto L25
+        L19:
+            java.lang.IllegalStateException r8 = new java.lang.IllegalStateException
+            java.lang.String r9 = "call to 'resume' before 'invoke' with coroutine"
+            r8.<init>(r9)
+            throw r8
+        L21:
+            kotlin.ResultKt.throwOnFailure(r9)
+            goto L77
+        L25:
+            kotlin.ResultKt.throwOnFailure(r9)
+            goto L88
+        L29:
+            kotlin.ResultKt.throwOnFailure(r9)
+            goto L56
+        L2d:
+            kotlin.ResultKt.throwOnFailure(r9)
+            com.adif.elcanomovil.serviceStorage.preferences.PreferenceStorage r9 = com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider.access$getPreferenceStorage$p(r2)
+            com.adif.elcanomovil.serviceStorage.model.avisa.AvisaToken r9 = r9.getAvisaToken()
+            if (r9 == 0) goto L3f
+            java.lang.String r9 = r9.getAccessToken()
+            goto L40
+        L3f:
+            r9 = 0
+        L40:
+            if (r9 == 0) goto L67
+            boolean r9 = kotlin.text.StringsKt.isBlank(r9)
+            if (r9 == 0) goto L49
+            goto L67
+        L49:
+            com.adif.elcanomovil.domain.usecases.avisa.user.LoginAvisaUserUseCase r9 = com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider.access$getLoginAvisaUserUseCase$p(r2)
+            r8.f348a = r7
+            java.lang.Object r9 = r9.invoke(r8)
+            if (r9 != r0) goto L56
+            goto L87
+        L56:
+            kotlinx.coroutines.flow.Flow r9 = (kotlinx.coroutines.flow.Flow) r9
+            C1.a r1 = new C1.a
+            r4 = 0
+            r1.<init>(r2, r3, r4)
+            r8.f348a = r6
+            java.lang.Object r8 = r9.collect(r1, r8)
+            if (r8 != r0) goto L88
+            goto L87
+        L67:
+            com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider.access$setOneTry$p(r2, r7)
+            com.adif.elcanomovil.domain.usecases.avisa.user.RegisterAvisaUserUseCase r9 = com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider.access$getRegisterAvisaUserUseCase$p(r2)
+            r8.f348a = r5
+            java.lang.Object r9 = r9.invoke(r8)
+            if (r9 != r0) goto L77
+            goto L87
+        L77:
+            kotlinx.coroutines.flow.Flow r9 = (kotlinx.coroutines.flow.Flow) r9
+            C1.a r1 = new C1.a
+            r5 = 1
+            r1.<init>(r2, r3, r5)
+            r8.f348a = r4
+            java.lang.Object r8 = r9.collect(r1, r8)
+            if (r8 != r0) goto L88
+        L87:
+            return r0
+        L88:
+            kotlin.Unit r8 = kotlin.Unit.INSTANCE
+            return r8
+        */
+        throw new UnsupportedOperationException("Method not decompiled: C1.d.invokeSuspend(java.lang.Object):java.lang.Object");
+    }
+}

apk_decompiled/sources/C1/e.java

@@ -0,0 +1,65 @@
+package C1;
+
+import com.adif.elcanomovil.uiAvisa.components.authenticator.DefaultAuthenticationProvider;
+import kotlin.ResultKt;
+import kotlin.Unit;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.intrinsics.IntrinsicsKt;
+import kotlin.coroutines.jvm.internal.SuspendLambda;
+import kotlin.jvm.functions.Function0;
+import kotlin.jvm.functions.Function2;
+import kotlinx.coroutines.BuildersKt;
+import kotlinx.coroutines.CoroutineDispatcher;
+import kotlinx.coroutines.CoroutineScope;
+import kotlinx.coroutines.Dispatchers;
+
+/* loaded from: classes.dex */
+public final class e extends SuspendLambda implements Function2 {
+
+    /* renamed from: a, reason: collision with root package name */
+    public int f351a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ DefaultAuthenticationProvider f352b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final /* synthetic */ Function0 f353c;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public e(DefaultAuthenticationProvider defaultAuthenticationProvider, Function0 function0, Continuation continuation) {
+        super(2, continuation);
+        this.f352b = defaultAuthenticationProvider;
+        this.f353c = function0;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Continuation create(Object obj, Continuation continuation) {
+        return new e(this.f352b, this.f353c, continuation);
+    }
+
+    @Override // kotlin.jvm.functions.Function2
+    public final Object invoke(Object obj, Object obj2) {
+        return ((e) create((CoroutineScope) obj, (Continuation) obj2)).invokeSuspend(Unit.INSTANCE);
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Object invokeSuspend(Object obj) {
+        Object coroutine_suspended = IntrinsicsKt.getCOROUTINE_SUSPENDED();
+        int i = this.f351a;
+        if (i == 0) {
+            ResultKt.throwOnFailure(obj);
+            CoroutineDispatcher io = Dispatchers.getIO();
+            d dVar = new d(this.f352b, this.f353c, null);
+            this.f351a = 1;
+            if (BuildersKt.withContext(io, dVar, this) == coroutine_suspended) {
+                return coroutine_suspended;
+            }
+        } else {
+            if (i != 1) {
+                throw new IllegalStateException("call to 'resume' before 'invoke' with coroutine");
+            }
+            ResultKt.throwOnFailure(obj);
+        }
+        return Unit.INSTANCE;
+    }
+}