Primer paso de la investigacion. Se aportan el .apk, las carpetas con el apk extraido y el apk descompilado. El archivo API_DOCUMENTATION.md es un archivo donde se anotaran los descubrimientos del funcionamiento de la API, y los .py son scripts para probar la funcionalidad de la API con los métodos que vayamos encontrando. Finalmente, los archivos .js son scripts de Frida para extraer informacion de la APP durante la ejecucion.

apk_decompiled/sources/Z0/a.java

@@ -0,0 +1,16 @@
+package Z0;
+
+import android.content.Context;
+import kotlin.jvm.internal.Intrinsics;
+
+/* loaded from: classes.dex */
+public final class a {
+
+    /* renamed from: a, reason: collision with root package name */
+    public final Context f2160a;
+
+    public a(Context context) {
+        Intrinsics.checkNotNullParameter(context, "context");
+        this.f2160a = context;
+    }
+}

apk_decompiled/sources/Z0/b.java

@@ -0,0 +1,102 @@
+package Z0;
+
+import android.location.LocationManager;
+import kotlin.Unit;
+import kotlin.coroutines.Continuation;
+import kotlin.coroutines.jvm.internal.SuspendLambda;
+import kotlin.jvm.functions.Function2;
+import kotlinx.coroutines.CoroutineScope;
+
+/* loaded from: classes.dex */
+public final class b extends SuspendLambda implements Function2 {
+
+    /* renamed from: a, reason: collision with root package name */
+    public int f2161a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final /* synthetic */ LocationManager f2162b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final /* synthetic */ c f2163c;
+
+    /* JADX WARN: 'super' call moved to the top of the method (can break code semantics) */
+    public b(LocationManager locationManager, c cVar, Continuation continuation) {
+        super(2, continuation);
+        this.f2162b = locationManager;
+        this.f2163c = cVar;
+    }
+
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    public final Continuation create(Object obj, Continuation continuation) {
+        return new b(this.f2162b, this.f2163c, continuation);
+    }
+
+    @Override // kotlin.jvm.functions.Function2
+    public final Object invoke(Object obj, Object obj2) {
+        return ((b) create((CoroutineScope) obj, (Continuation) obj2)).invokeSuspend(Unit.INSTANCE);
+    }
+
+    /* JADX WARN: Code restructure failed: missing block: B:14:0x0036, code lost:
+    
+        if (r1.emit(r5, r4) == r0) goto L17;
+     */
+    /* JADX WARN: Code restructure failed: missing block: B:15:0x0046, code lost:
+    
+        return r0;
+     */
+    /* JADX WARN: Code restructure failed: missing block: B:17:0x0044, code lost:
+    
+        if (r1.emit(r5, r4) == r0) goto L17;
+     */
+    @Override // kotlin.coroutines.jvm.internal.BaseContinuationImpl
+    /*
+        Code decompiled incorrectly, please refer to instructions dump.
+        To view partially-correct add '--show-bad-code' argument
+    */
+    public final java.lang.Object invokeSuspend(java.lang.Object r5) {
+        /*
+            r4 = this;
+            java.lang.Object r0 = kotlin.coroutines.intrinsics.IntrinsicsKt.getCOROUTINE_SUSPENDED()
+            int r1 = r4.f2161a
+            r2 = 2
+            r3 = 1
+            if (r1 == 0) goto L1b
+            if (r1 == r3) goto L17
+            if (r1 != r2) goto Lf
+            goto L17
+        Lf:
+            java.lang.IllegalStateException r4 = new java.lang.IllegalStateException
+            java.lang.String r5 = "call to 'resume' before 'invoke' with coroutine"
+            r4.<init>(r5)
+            throw r4
+        L17:
+            kotlin.ResultKt.throwOnFailure(r5)
+            goto L47
+        L1b:
+            kotlin.ResultKt.throwOnFailure(r5)
+            android.location.LocationManager r5 = r4.f2162b
+            java.lang.String r1 = "gps"
+            boolean r5 = r5.isProviderEnabled(r1)
+            Z0.c r1 = r4.f2163c
+            kotlinx.coroutines.flow.MutableSharedFlow r1 = r1.f2165b
+            if (r5 == 0) goto L39
+            java.lang.Boolean r5 = kotlin.coroutines.jvm.internal.Boxing.boxBoolean(r3)
+            r4.f2161a = r3
+            java.lang.Object r4 = r1.emit(r5, r4)
+            if (r4 != r0) goto L47
+            goto L46
+        L39:
+            r5 = 0
+            java.lang.Boolean r5 = kotlin.coroutines.jvm.internal.Boxing.boxBoolean(r5)
+            r4.f2161a = r2
+            java.lang.Object r4 = r1.emit(r5, r4)
+            if (r4 != r0) goto L47
+        L46:
+            return r0
+        L47:
+            kotlin.Unit r4 = kotlin.Unit.INSTANCE
+            return r4
+        */
+        throw new UnsupportedOperationException("Method not decompiled: Z0.b.invokeSuspend(java.lang.Object):java.lang.Object");
+    }
+}

apk_decompiled/sources/Z0/c.java

@@ -0,0 +1,64 @@
+package Z0;
+
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.location.LocationManager;
+import com.google.firebase.analytics.FirebaseAnalytics;
+import d1.InterfaceC0307a;
+import d1.d;
+import kotlin.coroutines.CoroutineContext;
+import kotlin.jvm.internal.Intrinsics;
+import kotlinx.coroutines.BuildersKt__Builders_commonKt;
+import kotlinx.coroutines.CompletableJob;
+import kotlinx.coroutines.CoroutineScope;
+import kotlinx.coroutines.Dispatchers;
+import kotlinx.coroutines.Job;
+import kotlinx.coroutines.SupervisorKt;
+import kotlinx.coroutines.flow.MutableSharedFlow;
+import kotlinx.coroutines.flow.SharedFlowKt;
+
+/* loaded from: classes.dex */
+public final class c extends BroadcastReceiver implements CoroutineScope {
+
+    /* renamed from: a, reason: collision with root package name */
+    public final Context f2164a;
+
+    /* renamed from: b, reason: collision with root package name */
+    public final MutableSharedFlow f2165b;
+
+    /* renamed from: c, reason: collision with root package name */
+    public final MutableSharedFlow f2166c;
+
+    /* renamed from: d, reason: collision with root package name */
+    public final CoroutineContext f2167d;
+
+    public c(Context context, InterfaceC0307a appDispatcher) {
+        Intrinsics.checkNotNullParameter(context, "context");
+        Intrinsics.checkNotNullParameter(appDispatcher, "appDispatcher");
+        this.f2164a = context;
+        MutableSharedFlow MutableSharedFlow$default = SharedFlowKt.MutableSharedFlow$default(0, 0, null, 7, null);
+        this.f2165b = MutableSharedFlow$default;
+        this.f2166c = MutableSharedFlow$default;
+        CompletableJob SupervisorJob$default = SupervisorKt.SupervisorJob$default((Job) null, 1, (Object) null);
+        ((d) appDispatcher).getClass();
+        this.f2167d = SupervisorJob$default.plus(Dispatchers.getMain());
+    }
+
+    @Override // kotlinx.coroutines.CoroutineScope
+    public final CoroutineContext getCoroutineContext() {
+        return this.f2167d;
+    }
+
+    @Override // android.content.BroadcastReceiver
+    public final void onReceive(Context context, Intent intent) {
+        String action;
+        Intrinsics.checkNotNullParameter(context, "context");
+        if (intent == null || (action = intent.getAction()) == null || action.hashCode() != -1184851779 || !action.equals("android.location.PROVIDERS_CHANGED")) {
+            return;
+        }
+        Object systemService = this.f2164a.getSystemService(FirebaseAnalytics.Param.LOCATION);
+        Intrinsics.checkNotNull(systemService, "null cannot be cast to non-null type android.location.LocationManager");
+        BuildersKt__Builders_commonKt.launch$default(this, null, null, new b((LocationManager) systemService, this, null), 3, null);
+    }
+}