Potentially Intent Spoofing

Description

The application is vulnerable to intent spoofing which could result in the access and exploitation of unauthorized components.

Recommendation

It is recommended to apply proper input validation and parameter filtering on intent action.

References
Technical details
[TAINT] String 'gcm.n.click_action' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n.click_action to construct an Intent

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.n.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n. to construct an Intent

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_OPEN' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zza', '(Landroid/os/Bundle; Landroid/app/PendingIntent;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_OPEN to construct an Intent

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zza():


    private android.app.PendingIntent zza(android.os.Bundle p5, android.app.PendingIntent p6)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_OPEN");
        this.zza(v0_2, p5);
        v0_2.putExtra("pending_intent", p6);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_DISMISS' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzau', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_DISMISS to construct an Intent

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzau():


    private android.app.PendingIntent zzau(android.os.Bundle p5)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_DISMISS");
        this.zza(v0_2, p5);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.notification.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.notification. to construct an Intent

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        android.app.PendingIntent v0_3;
        int v1_1;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_DISMISS' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzau', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_DISMISS to construct an Intent

Method com.google.firebase.messaging.zza.zzau():


    private android.app.PendingIntent zzau(android.os.Bundle p5)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_DISMISS");
        this.zza(v0_2, p5);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.n.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n. to construct an Intent

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.notification.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.notification. to construct an Intent

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        android.app.PendingIntent v0_3;
        int v1_1;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.n.click_action' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n.click_action to construct an Intent

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.n.click_action' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n.click_action to construct an Intent

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.n.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n. to construct an Intent

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_DISMISS' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzau', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_DISMISS to construct an Intent

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzau():


    private android.app.PendingIntent zzau(android.os.Bundle p5)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_DISMISS");
        this.zza(v0_2, p5);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.notification.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.notification. to construct an Intent

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        android.app.PendingIntent v0_3;
        int v1_1;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_OPEN' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zza', '(Landroid/os/Bundle; Landroid/app/PendingIntent;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_OPEN to construct an Intent

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zza():


    private android.app.PendingIntent zza(android.os.Bundle p5, android.app.PendingIntent p6)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_OPEN");
        this.zza(v0_2, p5);
        v0_2.putExtra("pending_intent", p6);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_OPEN' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/zza;', 'zza', '(Landroid/os/Bundle; Landroid/app/PendingIntent;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_OPEN to construct an Intent

Method com.google.firebase.messaging.zza.zza():


    private android.app.PendingIntent zza(android.os.Bundle p5, android.app.PendingIntent p6)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_OPEN");
        this.zza(v0_2, p5);
        v0_2.putExtra("pending_intent", p6);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/RemoteMessage$Builder;', 'build', '()Lcom/google/firebase/messaging/RemoteMessage;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.messaging.RemoteMessage$Builder.build():


    public com.google.firebase.messaging.RemoteMessage build()
    {
        android.os.Bundle v2_1 = new android.os.Bundle();
        String v3_1 = this.zzctd.entrySet().iterator();
        while (v3_1.hasNext()) {
            com.google.firebase.messaging.RemoteMessage v0_8 = ((java.util.Map$Entry) v3_1.next());
            v2_1.putString(((String) v0_8.getKey()), ((String) v0_8.getValue()));
        }
        v2_1.putAll(this.bI);
        com.google.firebase.messaging.RemoteMessage v0_2 = com.google.firebase.iid.FirebaseInstanceId.getInstance().getToken();
        if (v0_2 == null) {
            this.bI.remove("from");
        } else {
            this.bI.putString("from", v0_2);
        }
        return new com.google.firebase.messaging.RemoteMessage(v2_1);
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'gcm.n.click_action' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessagingService;', 'zzo', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n.click_action to construct an Intent

Method com.google.firebase.messaging.FirebaseMessagingService.zzo():


    private void zzo(android.content.Intent p3)
    {
        android.os.Bundle v0 = p3.getExtras();
        v0.remove("android.support.content.wakelockid");
        if (!com.google.firebase.messaging.zza.zzac(v0)) {
            this.onMessageReceived(new com.google.firebase.messaging.RemoteMessage(v0));
        } else {
            if (com.google.firebase.messaging.zza.zzdc(this)) {
                if (!com.google.firebase.messaging.FirebaseMessagingService.zzav(v0)) {
                } else {
                    com.google.firebase.messaging.zzb.zzo(this, p3);
                }
            } else {
                com.google.firebase.messaging.zza.zzer(this).zzas(v0);
            }
        }
        return;
    }

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.notification.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessagingService;', 'zzo', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.notification. to construct an Intent

Method com.google.firebase.messaging.FirebaseMessagingService.zzo():


    private void zzo(android.content.Intent p3)
    {
        android.os.Bundle v0 = p3.getExtras();
        v0.remove("android.support.content.wakelockid");
        if (!com.google.firebase.messaging.zza.zzac(v0)) {
            this.onMessageReceived(new com.google.firebase.messaging.RemoteMessage(v0));
        } else {
            if (com.google.firebase.messaging.zza.zzdc(this)) {
                if (!com.google.firebase.messaging.FirebaseMessagingService.zzav(v0)) {
                } else {
                    com.google.firebase.messaging.zzb.zzo(this, p3);
                }
            } else {
                com.google.firebase.messaging.zza.zzer(this).zzas(v0);
            }
        }
        return;
    }

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'gcm.n.' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessagingService;', 'zzo', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzag', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value gcm.n. to construct an Intent

Method com.google.firebase.messaging.FirebaseMessagingService.zzo():


    private void zzo(android.content.Intent p3)
    {
        android.os.Bundle v0 = p3.getExtras();
        v0.remove("android.support.content.wakelockid");
        if (!com.google.firebase.messaging.zza.zzac(v0)) {
            this.onMessageReceived(new com.google.firebase.messaging.RemoteMessage(v0));
        } else {
            if (com.google.firebase.messaging.zza.zzdc(this)) {
                if (!com.google.firebase.messaging.FirebaseMessagingService.zzav(v0)) {
                } else {
                    com.google.firebase.messaging.zzb.zzo(this, p3);
                }
            } else {
                com.google.firebase.messaging.zza.zzer(this).zzas(v0);
            }
        }
        return;
    }

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzag():


    private android.app.PendingIntent zzag(android.os.Bundle p5)
    {
        int v1_1;
        android.app.PendingIntent v0_3;
        int v1_3 = com.google.firebase.messaging.zza.zzf(p5, "gcm.n.click_action");
        if (android.text.TextUtils.isEmpty(v1_3)) {
            android.app.PendingIntent v0_1 = this.mContext.getPackageManager().getLaunchIntentForPackage(this.mContext.getPackageName());
            if (v0_1 != null) {
                v1_1 = v0_1;
                android.app.PendingIntent v0_7 = new android.os.Bundle(p5);
                com.google.firebase.messaging.FirebaseMessagingService.zzab(v0_7);
                v1_1.putExtras(v0_7);
                int v2_0 = v0_7.keySet().iterator();
                while (v2_0.hasNext()) {
                    android.app.PendingIntent v0_13 = ((String) v2_0.next());
                    if ((v0_13.startsWith("gcm.n.")) || (v0_13.startsWith("gcm.notification."))) {
                        v1_1.removeExtra(v0_13);
                    }
                }
                v0_3 = android.app.PendingIntent.getActivity(this.mContext, this.zzblg(), v1_1, 1073741824);
            } else {
                android.util.Log.w("FirebaseMessaging", "No activity found to launch app");
                v0_3 = 0;
            }
        } else {
            android.app.PendingIntent v0_5 = new android.content.Intent(v1_3);
            v0_5.setPackage(this.mContext.getPackageName());
            v0_5.setFlags(268435456);
            v1_1 = v0_5;
        }
        return v0_3;
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_OPEN' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessagingService;', 'zzo', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zza', '(Landroid/os/Bundle; Landroid/app/PendingIntent;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_OPEN to construct an Intent

Method com.google.firebase.messaging.FirebaseMessagingService.zzo():


    private void zzo(android.content.Intent p3)
    {
        android.os.Bundle v0 = p3.getExtras();
        v0.remove("android.support.content.wakelockid");
        if (!com.google.firebase.messaging.zza.zzac(v0)) {
            this.onMessageReceived(new com.google.firebase.messaging.RemoteMessage(v0));
        } else {
            if (com.google.firebase.messaging.zza.zzdc(this)) {
                if (!com.google.firebase.messaging.FirebaseMessagingService.zzav(v0)) {
                } else {
                    com.google.firebase.messaging.zzb.zzo(this, p3);
                }
            } else {
                com.google.firebase.messaging.zza.zzer(this).zzas(v0);
            }
        }
        return;
    }

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zza():


    private android.app.PendingIntent zza(android.os.Bundle p5, android.app.PendingIntent p6)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_OPEN");
        this.zza(v0_2, p5);
        v0_2.putExtra("pending_intent", p6);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.firebase.messaging.NOTIFICATION_DISMISS' ==>>> Sink '['Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessagingService;', 'zzo', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzas', '(Landroid/os/Bundle;)V'), ('Lcom/google/firebase/messaging/zza;', 'zzaf', '(Landroid/os/Bundle;)Landroid/app/Notification;'), ('Lcom/google/firebase/messaging/zza;', 'zzau', '(Landroid/os/Bundle;)Landroid/app/PendingIntent;'), ('Landroid/content/Intent;', '<init>', '(Ljava/lang/String;)V')]]

Use of a string value com.google.firebase.messaging.NOTIFICATION_DISMISS to construct an Intent

Method com.google.firebase.messaging.FirebaseMessagingService.zzo():


    private void zzo(android.content.Intent p3)
    {
        android.os.Bundle v0 = p3.getExtras();
        v0.remove("android.support.content.wakelockid");
        if (!com.google.firebase.messaging.zza.zzac(v0)) {
            this.onMessageReceived(new com.google.firebase.messaging.RemoteMessage(v0));
        } else {
            if (com.google.firebase.messaging.zza.zzdc(this)) {
                if (!com.google.firebase.messaging.FirebaseMessagingService.zzav(v0)) {
                } else {
                    com.google.firebase.messaging.zzb.zzo(this, p3);
                }
            } else {
                com.google.firebase.messaging.zza.zzer(this).zzas(v0);
            }
        }
        return;
    }

Method com.google.firebase.messaging.zza.zzas():


    void zzas(android.os.Bundle p3)
    {
        this.zza(com.google.firebase.messaging.zza.zzf(p3, "gcm.n.tag"), this.zzaf(p3));
        return;
    }

Method com.google.firebase.messaging.zza.zzaf():


    private android.app.Notification zzaf(android.os.Bundle p10)
    {
        int v2_0 = this.zzg(p10, "gcm.n.title");
        String v3 = this.zzg(p10, "gcm.n.body");
        android.support.v4.app.NotificationCompat$Builder v4_0 = this.zzka(com.google.firebase.messaging.zza.zzf(p10, "gcm.n.icon"));
        String v5 = com.google.firebase.messaging.zza.zzf(p10, "gcm.n.color");
        android.net.Uri v6 = this.zzkb(com.google.firebase.messaging.zza.zzat(p10));
        android.app.PendingIntent v1 = this.zzag(p10);
        android.app.Notification v0_3 = 0;
        if (com.google.firebase.messaging.FirebaseMessagingService.zzav(p10)) {
            v1 = this.zza(p10, v1);
            v0_3 = this.zzau(p10);
        }
        android.support.v4.app.NotificationCompat$Builder v4_1 = new android.support.v4.app.NotificationCompat$Builder(this.mContext).setAutoCancel(1).setSmallIcon(v4_0);
        if (android.text.TextUtils.isEmpty(v2_0)) {
            v4_1.setContentTitle(this.mContext.getApplicationInfo().loadLabel(this.mContext.getPackageManager()));
        } else {
            v4_1.setContentTitle(v2_0);
        }
        if (!android.text.TextUtils.isEmpty(v3)) {
            v4_1.setContentText(v3);
            v4_1.setStyle(new android.support.v4.app.NotificationCompat$BigTextStyle().bigText(v3));
        }
        if (!android.text.TextUtils.isEmpty(v5)) {
            v4_1.setColor(android.graphics.Color.parseColor(v5));
        }
        if (v6 != null) {
            v4_1.setSound(v6);
        }
        if (v1 != null) {
            v4_1.setContentIntent(v1);
        }
        if (v0_3 != null) {
            v4_1.setDeleteIntent(v0_3);
        }
        return v4_1.build();
    }

Method com.google.firebase.messaging.zza.zzau():


    private android.app.PendingIntent zzau(android.os.Bundle p5)
    {
        android.app.PendingIntent v0_2 = new android.content.Intent("com.google.firebase.messaging.NOTIFICATION_DISMISS");
        this.zza(v0_2, p5);
        return android.app.PendingIntent.getBroadcast(this.mContext, this.zzblg(), com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzi(this.mContext, v0_2), 1073741824);
    }

Method android.content.Intent.<init>() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessaging;', 'send', '(Lcom/google/firebase/messaging/RemoteMessage;)V'), ('Lcom/google/firebase/messaging/FirebaseMessaging;', 'zzk', '(Landroid/content/Context; Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.messaging.FirebaseMessaging.send():


    public void send(com.google.firebase.messaging.RemoteMessage p5)
    {
        if (!android.text.TextUtils.isEmpty(p5.getTo())) {
            String v0_6 = com.google.firebase.FirebaseApp.getInstance().getApplicationContext();
            String v1_0 = com.google.firebase.iid.zzf.zzdi(v0_6);
            if (v1_0 != null) {
                android.content.Intent v2_1 = new android.content.Intent("com.google.android.gcm.intent.SEND");
                this.zzk(v0_6, v2_1);
                v2_1.setPackage(v1_0);
                p5.zzaf(v2_1);
                v0_6.sendOrderedBroadcast(v2_1, "com.google.android.gtalkservice.permission.GTALK_SERVICE");
            } else {
                android.util.Log.e("FirebaseMessaging", "Google Play services package is missing. Impossible to send message");
            }
            return;
        } else {
            throw new IllegalArgumentException("Missing \'to\'");
        }
    }

Method com.google.firebase.messaging.FirebaseMessaging.zzk():


    private declared_synchronized void zzk(android.content.Context p4, android.content.Intent p5)
    {
        try {
            if (this.baQ == null) {
                String v0_4 = new android.content.Intent();
                v0_4.setPackage("com.google.example.invalidpackage");
                this.baQ = android.app.PendingIntent.getBroadcast(p4, 0, v0_4, 0);
            }
        } catch (String v0_1) {
            throw v0_1;
        }
        p5.putExtra("app", this.baQ);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessaging;', 'zzk', '(Landroid/content/Context; Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.messaging.FirebaseMessaging.zzk():


    private declared_synchronized void zzk(android.content.Context p4, android.content.Intent p5)
    {
        try {
            if (this.baQ == null) {
                String v0_4 = new android.content.Intent();
                v0_4.setPackage("com.google.example.invalidpackage");
                this.baQ = android.app.PendingIntent.getBroadcast(p4, 0, v0_4, 0);
            }
        } catch (String v0_1) {
            throw v0_1;
        }
        p5.putExtra("app", this.baQ);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/messaging/FirebaseMessaging;', 'getInstance', '()Lcom/google/firebase/messaging/FirebaseMessaging;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.messaging.FirebaseMessaging.getInstance():


    public static declared_synchronized com.google.firebase.messaging.FirebaseMessaging getInstance()
    {
        try {
            if (com.google.firebase.messaging.FirebaseMessaging.baP == null) {
                com.google.firebase.messaging.FirebaseMessaging.baP = new com.google.firebase.messaging.FirebaseMessaging(com.google.firebase.iid.FirebaseInstanceId.getInstance());
            }
        } catch (com.google.firebase.messaging.FirebaseMessaging v0_4) {
            throw v0_4;
        }
        return com.google.firebase.messaging.FirebaseMessaging.baP;
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzc;', 'getToken', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzc.getToken():


    public String getToken()
    {
        return this.bas.getToken();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken()
    {
        String v0 = this.zzcwt();
        if (v0 == null) {
            com.google.firebase.iid.FirebaseInstanceIdService.zzen(this.bau.getApplicationContext());
        }
        return v0;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/zzc;', 'zzcwr', '()Lcom/google/firebase/iid/zzc;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.zzc.zzcwr():


    public static com.google.firebase.iid.zzc zzcwr()
    {
        return new com.google.firebase.iid.zzc(com.google.firebase.iid.FirebaseInstanceId.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzm', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzm():


    public void zzm(android.content.Intent p5)
    {
        int v0_2 = p5.getAction();
        if (v0_2 == 0) {
            v0_2 = "";
        }
        int v0_1;
        switch (v0_2.hashCode()) {
            case -1737547627:
                if (!v0_2.equals("ACTION_TOKEN_REFRESH_RETRY")) {
                    v0_1 = -1;
                } else {
                    v0_1 = 0;
                }
                break;
            default:
        }
        switch (v0_1) {
            case 0:
                this.zza(p5, 0);
                break;
            default:
                this.zzac(p5);
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzm', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzm():


    public void zzm(android.content.Intent p5)
    {
        int v0_2 = p5.getAction();
        if (v0_2 == 0) {
            v0_2 = "";
        }
        int v0_1;
        switch (v0_2.hashCode()) {
            case -1737547627:
                if (!v0_2.equals("ACTION_TOKEN_REFRESH_RETRY")) {
                    v0_1 = -1;
                } else {
                    v0_1 = 0;
                }
                break;
            default:
        }
        switch (v0_1) {
            case 0:
                this.zza(p5, 0);
                break;
            default:
                this.zzac(p5);
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzm', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzm():


    public void zzm(android.content.Intent p5)
    {
        int v0_2 = p5.getAction();
        if (v0_2 == 0) {
            v0_2 = "";
        }
        int v0_1;
        switch (v0_2.hashCode()) {
            case -1737547627:
                if (!v0_2.equals("ACTION_TOKEN_REFRESH_RETRY")) {
                    v0_1 = -1;
                } else {
                    v0_1 = 0;
                }
                break;
            default:
        }
        switch (v0_1) {
            case 0:
                this.zza(p5, 0);
                break;
            default:
                this.zzac(p5);
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzac', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzsy', '(Ljava/lang/String;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzac():


    public void zzac(android.content.Intent p11)
    {
        com.google.firebase.iid.zzf v0_0 = this.zzad(p11);
        android.os.Bundle v1_1 = this.zzsy(v0_0);
        com.google.firebase.iid.zzg v2_2 = p11.getStringExtra("CMD");
        if (this.baC) {
            String v4_1 = String.valueOf(p11.getExtras());
            android.util.Log.d("FirebaseInstanceId", new StringBuilder((((String.valueOf(v0_0).length() + 18) + String.valueOf(v2_2).length()) + String.valueOf(v4_1).length())).append("Service command ").append(v0_0).append(" ").append(v2_2).append(" ").append(v4_1).toString());
        }
        if (p11.getStringExtra("unregistered") == null) {
            if (!"gcm.googleapis.com/refresh".equals(p11.getStringExtra("from"))) {
                if (!"RST".equals(v2_2)) {
                    if (!"RST_FULL".equals(v2_2)) {
                        if (!"SYNC".equals(v2_2)) {
                            if ("PING".equals(v2_2)) {
                                this.zza(v1_1.zzcwz(), p11.getExtras());
                            }
                        } else {
                            v1_1.zzcwy().zzkj(v0_0);
                            this.zza(p11, 0);
                        }
                    } else {
                        if (!v1_1.zzcwy().isEmpty()) {
                            v1_1.zzblx();
                            v1_1.zzcwy().zzbmd();
                            this.zza(p11, 1);
                        }
                    }
                } else {
                    v1_1.zzblx();
                    v1_1.zzcwy().zzkj(v0_0);
                    this.zza(p11, 1);
                }
            } else {
                v1_1.zzcwy().zzkj(v0_0);
                this.zza(p11, 0);
            }
        } else {
            com.google.firebase.iid.zzg v2_0 = v1_1.zzcwy();
            if (v0_0 == null) {
                v0_0 = "";
            }
            v2_0.zzkj(v0_0);
            v1_1.zzcwz().zzv(p11);
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzsy():


    private com.google.firebase.iid.zzd zzsy(String p3)
    {
        com.google.firebase.iid.zzd v0_2;
        if (p3 != null) {
            com.google.firebase.iid.zzd v0_1 = new android.os.Bundle();
            v0_1.putString("subtype", p3);
            v0_2 = com.google.firebase.iid.zzd.zzb(this, v0_1);
        } else {
            v0_2 = com.google.firebase.iid.zzd.zzb(this, 0);
        }
        return v0_2;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzac', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzac():


    public void zzac(android.content.Intent p11)
    {
        com.google.firebase.iid.zzf v0_0 = this.zzad(p11);
        android.os.Bundle v1_1 = this.zzsy(v0_0);
        com.google.firebase.iid.zzg v2_2 = p11.getStringExtra("CMD");
        if (this.baC) {
            String v4_1 = String.valueOf(p11.getExtras());
            android.util.Log.d("FirebaseInstanceId", new StringBuilder((((String.valueOf(v0_0).length() + 18) + String.valueOf(v2_2).length()) + String.valueOf(v4_1).length())).append("Service command ").append(v0_0).append(" ").append(v2_2).append(" ").append(v4_1).toString());
        }
        if (p11.getStringExtra("unregistered") == null) {
            if (!"gcm.googleapis.com/refresh".equals(p11.getStringExtra("from"))) {
                if (!"RST".equals(v2_2)) {
                    if (!"RST_FULL".equals(v2_2)) {
                        if (!"SYNC".equals(v2_2)) {
                            if ("PING".equals(v2_2)) {
                                this.zza(v1_1.zzcwz(), p11.getExtras());
                            }
                        } else {
                            v1_1.zzcwy().zzkj(v0_0);
                            this.zza(p11, 0);
                        }
                    } else {
                        if (!v1_1.zzcwy().isEmpty()) {
                            v1_1.zzblx();
                            v1_1.zzcwy().zzbmd();
                            this.zza(p11, 1);
                        }
                    }
                } else {
                    v1_1.zzblx();
                    v1_1.zzcwy().zzkj(v0_0);
                    this.zza(p11, 1);
                }
            } else {
                v1_1.zzcwy().zzkj(v0_0);
                this.zza(p11, 0);
            }
        } else {
            com.google.firebase.iid.zzg v2_0 = v1_1.zzcwy();
            if (v0_0 == null) {
                v0_0 = "";
            }
            v2_0.zzkj(v0_0);
            v1_1.zzcwz().zzv(p11);
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzac', '(Landroid/content/Intent;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzac():


    public void zzac(android.content.Intent p11)
    {
        com.google.firebase.iid.zzf v0_0 = this.zzad(p11);
        android.os.Bundle v1_1 = this.zzsy(v0_0);
        com.google.firebase.iid.zzg v2_2 = p11.getStringExtra("CMD");
        if (this.baC) {
            String v4_1 = String.valueOf(p11.getExtras());
            android.util.Log.d("FirebaseInstanceId", new StringBuilder((((String.valueOf(v0_0).length() + 18) + String.valueOf(v2_2).length()) + String.valueOf(v4_1).length())).append("Service command ").append(v0_0).append(" ").append(v2_2).append(" ").append(v4_1).toString());
        }
        if (p11.getStringExtra("unregistered") == null) {
            if (!"gcm.googleapis.com/refresh".equals(p11.getStringExtra("from"))) {
                if (!"RST".equals(v2_2)) {
                    if (!"RST_FULL".equals(v2_2)) {
                        if (!"SYNC".equals(v2_2)) {
                            if ("PING".equals(v2_2)) {
                                this.zza(v1_1.zzcwz(), p11.getExtras());
                            }
                        } else {
                            v1_1.zzcwy().zzkj(v0_0);
                            this.zza(p11, 0);
                        }
                    } else {
                        if (!v1_1.zzcwy().isEmpty()) {
                            v1_1.zzblx();
                            v1_1.zzcwy().zzbmd();
                            this.zza(p11, 1);
                        }
                    }
                } else {
                    v1_1.zzblx();
                    v1_1.zzcwy().zzkj(v0_0);
                    this.zza(p11, 1);
                }
            } else {
                v1_1.zzcwy().zzkj(v0_0);
                this.zza(p11, 0);
            }
        } else {
            com.google.firebase.iid.zzg v2_0 = v1_1.zzcwy();
            if (v0_0 == null) {
                v0_0 = "";
            }
            v2_0.zzkj(v0_0);
            v1_1.zzcwz().zzv(p11);
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzab', '(Landroid/content/Intent;)I'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzsy', '(Ljava/lang/String;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzab():


    protected int zzab(android.content.Intent p6)
    {
        String v0_2;
        this.baC = android.util.Log.isLoggable("FirebaseInstanceId", 3);
        if ((p6.getStringExtra("error") == null) && (p6.getStringExtra("registration_id") == null)) {
            v0_2 = super.zzab(p6);
        } else {
            String v1_1 = this.zzad(p6);
            if (this.baC) {
                String v0_6;
                String v0_4 = String.valueOf(v1_1);
                if (v0_4.length() == 0) {
                    v0_6 = new String("Register result in service ");
                } else {
                    v0_6 = "Register result in service ".concat(v0_4);
                }
                android.util.Log.d("FirebaseInstanceId", v0_6);
            }
            this.zzsy(v1_1).zzcwz().zzv(p6);
            this.zzble();
            v0_2 = 2;
        }
        return v0_2;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzsy():


    private com.google.firebase.iid.zzd zzsy(String p3)
    {
        com.google.firebase.iid.zzd v0_2;
        if (p3 != null) {
            com.google.firebase.iid.zzd v0_1 = new android.os.Bundle();
            v0_1.putString("subtype", p3);
            v0_2 = com.google.firebase.iid.zzd.zzb(this, v0_1);
        } else {
            v0_2 = com.google.firebase.iid.zzd.zzb(this, 0);
        }
        return v0_2;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzsy', '(Ljava/lang/String;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzsy():


    private com.google.firebase.iid.zzd zzsy(String p3)
    {
        com.google.firebase.iid.zzd v0_2;
        if (p3 != null) {
            com.google.firebase.iid.zzd v0_1 = new android.os.Bundle();
            v0_1.putString("subtype", p3);
            v0_2 = com.google.firebase.iid.zzd.zzb(this, v0_1);
        } else {
            v0_2 = com.google.firebase.iid.zzd.zzb(this, 0);
        }
        return v0_2;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Lcom/google/firebase/iid/zzf; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(com.google.firebase.iid.zzf p4, android.os.Bundle p5)
    {
        String v0_0 = com.google.firebase.iid.zzf.zzdi(this);
        if (v0_0 != null) {
            android.content.Intent v1_2 = new android.content.Intent("com.google.android.gcm.intent.SEND");
            v1_2.setPackage(v0_0);
            v1_2.putExtras(p5);
            p4.zzs(v1_2);
            v1_2.putExtra("google.to", "google.com/iid");
            v1_2.putExtra("google.message_id", com.google.firebase.iid.zzf.zzbmc());
            this.sendOrderedBroadcast(v1_2, "com.google.android.gtalkservice.permission.GTALK_SERVICE");
        } else {
            android.util.Log.w("FirebaseInstanceId", "Unable to respond to ping due to missing target package");
        }
        return;
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.to' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Lcom/google/firebase/iid/zzf; Landroid/os/Bundle;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value google.to to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(com.google.firebase.iid.zzf p4, android.os.Bundle p5)
    {
        String v0_0 = com.google.firebase.iid.zzf.zzdi(this);
        if (v0_0 != null) {
            android.content.Intent v1_2 = new android.content.Intent("com.google.android.gcm.intent.SEND");
            v1_2.setPackage(v0_0);
            v1_2.putExtras(p5);
            p4.zzs(v1_2);
            v1_2.putExtra("google.to", "google.com/iid");
            v1_2.putExtra("google.message_id", com.google.firebase.iid.zzf.zzbmc());
            this.sendOrderedBroadcast(v1_2, "com.google.android.gtalkservice.permission.GTALK_SERVICE");
        } else {
            android.util.Log.w("FirebaseInstanceId", "Unable to respond to ping due to missing target package");
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'google.com/iid' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Ljava/lang/String;)Landroid/content/Intent;', '1', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Lcom/google/firebase/iid/zzf; Landroid/os/Bundle;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value google.com/iid to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(com.google.firebase.iid.zzf p4, android.os.Bundle p5)
    {
        String v0_0 = com.google.firebase.iid.zzf.zzdi(this);
        if (v0_0 != null) {
            android.content.Intent v1_2 = new android.content.Intent("com.google.android.gcm.intent.SEND");
            v1_2.setPackage(v0_0);
            v1_2.putExtras(p5);
            p4.zzs(v1_2);
            v1_2.putExtra("google.to", "google.com/iid");
            v1_2.putExtra("google.message_id", com.google.firebase.iid.zzf.zzbmc());
            this.sendOrderedBroadcast(v1_2, "com.google.android.gtalkservice.permission.GTALK_SERVICE");
        } else {
            android.util.Log.w("FirebaseInstanceId", "Unable to respond to ping due to missing target package");
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'google.message_id' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Lcom/google/firebase/iid/zzf; Landroid/os/Bundle;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value google.message_id to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(com.google.firebase.iid.zzf p4, android.os.Bundle p5)
    {
        String v0_0 = com.google.firebase.iid.zzf.zzdi(this);
        if (v0_0 != null) {
            android.content.Intent v1_2 = new android.content.Intent("com.google.android.gcm.intent.SEND");
            v1_2.setPackage(v0_0);
            v1_2.putExtras(p5);
            p4.zzs(v1_2);
            v1_2.putExtra("google.to", "google.com/iid");
            v1_2.putExtra("google.message_id", com.google.firebase.iid.zzf.zzbmc());
            this.sendOrderedBroadcast(v1_2, "com.google.android.gtalkservice.permission.GTALK_SERVICE");
        } else {
            android.util.Log.w("FirebaseInstanceId", "Unable to respond to ping due to missing target package");
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Intent; Z)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    private void zza(android.content.Intent p9, boolean p10)
    {
        com.google.firebase.iid.FirebaseInstanceIdService.baB = 0;
        if (com.google.firebase.iid.zzf.zzdi(this) != null) {
            String v0_0 = com.google.firebase.iid.FirebaseInstanceId.getInstance();
            com.google.firebase.iid.zze v4 = v0_0.zzcwv();
            if (v0_0.zzcwt() != null) {
                String v3_1 = v4.zzcxa();
                while (v3_1 != null) {
                    String v0_4 = v3_1.split("!");
                    if (v0_4.length == 2) {
                        String v5_1 = v0_4[0];
                        String v6_1 = v0_4[1];
                        String v0_6 = -1;
                        try {
                            switch (v5_1.hashCode()) {
                                case 83:
                                    if (v5_1.equals("S")) {
                                        v0_6 = 0;
                                    } else {
                                        switch (v0_6) {
                                            case 0:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsw(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "subscribe operation succeeded");
                                                }
                                            case 1:
                                                com.google.firebase.iid.FirebaseInstanceId.getInstance().zzsx(v6_1);
                                                if (this.baC) {
                                                    android.util.Log.d("FirebaseInstanceId", "unsubscribe operation succeeded");
                                                }
                                                break;
                                        }
                                    }
                                    break;
                                case 85:
                                    if (!v5_1.equals("U")) {
                                    } else {
                                        v0_6 = 1;
                                    }
                                    break;
                                default:
                            }
                        } catch (String v0_13) {
                        }
                        this.zzd(p9, v0_13.getMessage());
                        return;
                    }
                    v4.zzsz(v3_1);
                    v3_1 = v4.zzcxa();
                }
                android.util.Log.d("FirebaseInstanceId", "topic sync succeeded");
            } else {
                try {
                    if (v0_0.zzcwu() == null) {
                        this.zzd(p9, "returned token is null");
                    } else {
                        if (this.baC) {
                            android.util.Log.d("FirebaseInstanceId", "get master token succeeded");
                        }
                        com.google.firebase.iid.FirebaseInstanceIdService.zza(this, v0_0);
                        this.onTokenRefresh();
                    }
                } catch (String v0_20) {
                    this.zzd(p9, v0_20.getMessage());
                } catch (String v0_19) {
                    android.util.Log.e("FirebaseInstanceId", "Unable to get master token", v0_19);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/FirebaseInstanceId;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    static void zza(android.content.Context p2, com.google.firebase.iid.FirebaseInstanceId p3)
    {
        if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
            if ((p3.zzcwt() == null) || (p3.zzcwv().zzcxa() != null)) {
                com.google.firebase.iid.FirebaseInstanceIdService.zzen(p2);
            }
        } else {
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzsx', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzsx():


    void zzsx(String p7)
    {
        if (this.getToken() != null) {
            String v0_3;
            android.os.Bundle v1_2 = new android.os.Bundle();
            String v3_1 = String.valueOf("/topics/");
            String v0_1 = String.valueOf(p7);
            if (v0_1.length() == 0) {
                v0_3 = new String(v3_1);
            } else {
                v0_3 = v3_1.concat(v0_1);
            }
            String v0_7;
            v1_2.putString("gcm.topic", v0_3);
            com.google.firebase.iid.zzd v2_0 = this.bav;
            String v3_0 = this.getToken();
            String v4_1 = String.valueOf("/topics/");
            String v0_5 = String.valueOf(p7);
            if (v0_5.length() == 0) {
                v0_7 = new String(v4_1);
            } else {
                v0_7 = v4_1.concat(v0_5);
            }
            v2_0.zzb(v3_0, v0_7, v1_2);
            return;
        } else {
            throw new java.io.IOException("token not available");
        }
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzsx', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzsx():


    void zzsx(String p7)
    {
        if (this.getToken() != null) {
            String v0_3;
            android.os.Bundle v1_2 = new android.os.Bundle();
            String v3_1 = String.valueOf("/topics/");
            String v0_1 = String.valueOf(p7);
            if (v0_1.length() == 0) {
                v0_3 = new String(v3_1);
            } else {
                v0_3 = v3_1.concat(v0_1);
            }
            String v0_7;
            v1_2.putString("gcm.topic", v0_3);
            com.google.firebase.iid.zzd v2_0 = this.bav;
            String v3_0 = this.getToken();
            String v4_1 = String.valueOf("/topics/");
            String v0_5 = String.valueOf(p7);
            if (v0_5.length() == 0) {
                v0_7 = new String(v4_1);
            } else {
                v0_7 = v4_1.concat(v0_5);
            }
            v2_0.zzb(v3_0, v0_7, v1_2);
            return;
        } else {
            throw new java.io.IOException("token not available");
        }
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzsx', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzsx():


    void zzsx(String p7)
    {
        if (this.getToken() != null) {
            String v0_3;
            android.os.Bundle v1_2 = new android.os.Bundle();
            String v3_1 = String.valueOf("/topics/");
            String v0_1 = String.valueOf(p7);
            if (v0_1.length() == 0) {
                v0_3 = new String(v3_1);
            } else {
                v0_3 = v3_1.concat(v0_1);
            }
            String v0_7;
            v1_2.putString("gcm.topic", v0_3);
            com.google.firebase.iid.zzd v2_0 = this.bav;
            String v3_0 = this.getToken();
            String v4_1 = String.valueOf("/topics/");
            String v0_5 = String.valueOf(p7);
            if (v0_5.length() == 0) {
                v0_7 = new String(v4_1);
            } else {
                v0_7 = v4_1.concat(v0_5);
            }
            v2_0.zzb(v3_0, v0_7, v1_2);
            return;
        } else {
            throw new java.io.IOException("token not available");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken()
    {
        String v0 = this.zzcwt();
        if (v0 == null) {
            com.google.firebase.iid.FirebaseInstanceIdService.zzen(this.bau.getApplicationContext());
        }
        return v0;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzsw', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzsw():


    void zzsw(String p7)
    {
        if (this.getToken() != null) {
            String v0_3;
            android.os.Bundle v1_2 = new android.os.Bundle();
            String v3_1 = String.valueOf("/topics/");
            String v0_1 = String.valueOf(p7);
            if (v0_1.length() == 0) {
                v0_3 = new String(v3_1);
            } else {
                v0_3 = v3_1.concat(v0_1);
            }
            String v0_7;
            v1_2.putString("gcm.topic", v0_3);
            com.google.firebase.iid.zzd v2_0 = this.bav;
            String v3_0 = this.getToken();
            String v4_1 = String.valueOf("/topics/");
            String v0_5 = String.valueOf(p7);
            if (v0_5.length() == 0) {
                v0_7 = new String(v4_1);
            } else {
                v0_7 = v4_1.concat(v0_5);
            }
            v2_0.getToken(v3_0, v0_7, v1_2);
            return;
        } else {
            throw new java.io.IOException("token not available");
        }
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzsw', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzsw():


    void zzsw(String p7)
    {
        if (this.getToken() != null) {
            String v0_3;
            android.os.Bundle v1_2 = new android.os.Bundle();
            String v3_1 = String.valueOf("/topics/");
            String v0_1 = String.valueOf(p7);
            if (v0_1.length() == 0) {
                v0_3 = new String(v3_1);
            } else {
                v0_3 = v3_1.concat(v0_1);
            }
            String v0_7;
            v1_2.putString("gcm.topic", v0_3);
            com.google.firebase.iid.zzd v2_0 = this.bav;
            String v3_0 = this.getToken();
            String v4_1 = String.valueOf("/topics/");
            String v0_5 = String.valueOf(p7);
            if (v0_5.length() == 0) {
                v0_7 = new String(v4_1);
            } else {
                v0_7 = v4_1.concat(v0_5);
            }
            v2_0.getToken(v3_0, v0_7, v1_2);
            return;
        } else {
            throw new java.io.IOException("token not available");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken()
    {
        String v0 = this.zzcwt();
        if (v0 == null) {
            com.google.firebase.iid.FirebaseInstanceIdService.zzen(this.bau.getApplicationContext());
        }
        return v0;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzsw', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzsw():


    void zzsw(String p7)
    {
        if (this.getToken() != null) {
            String v0_3;
            android.os.Bundle v1_2 = new android.os.Bundle();
            String v3_1 = String.valueOf("/topics/");
            String v0_1 = String.valueOf(p7);
            if (v0_1.length() == 0) {
                v0_3 = new String(v3_1);
            } else {
                v0_3 = v3_1.concat(v0_1);
            }
            String v0_7;
            v1_2.putString("gcm.topic", v0_3);
            com.google.firebase.iid.zzd v2_0 = this.bav;
            String v3_0 = this.getToken();
            String v4_1 = String.valueOf("/topics/");
            String v0_5 = String.valueOf(p7);
            if (v0_5.length() == 0) {
                v0_7 = new String(v4_1);
            } else {
                v0_7 = v4_1.concat(v0_5);
            }
            v2_0.getToken(v3_0, v0_7, v1_2);
            return;
        } else {
            throw new java.io.IOException("token not available");
        }
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzsv', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzsv():


    public void zzsv(String p2)
    {
        com.google.firebase.iid.FirebaseInstanceId.bat.zzsv(p2);
        com.google.firebase.iid.FirebaseInstanceIdService.zzen(this.bau.getApplicationContext());
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzcwu', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzcwu():


    String zzcwu()
    {
        return this.getToken(this.baw, "*");
    }

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'getToken', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzd;', 'zzc', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken(String p3, String p4)
    {
        return this.bav.getToken(p3, p4, 0);
    }

Method com.google.firebase.iid.zzd.getToken():


    public String getToken(String p7, String p8, android.os.Bundle p9)
    {
        String v1_0 = 0;
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            String v4;
            com.google.firebase.iid.zzg v0_1 = 1;
            if (!this.zzbma()) {
                v4 = com.google.firebase.iid.zzd.baF.zzi(this.aat, p7, p8);
            } else {
                v4 = 0;
            }
            if (v4 == null) {
                if (p9 == null) {
                    p9 = new android.os.Bundle();
                }
                if (p9.getString("ttl") != null) {
                    v0_1 = 0;
                }
                if (!"jwt".equals(p9.getString("type"))) {
                    v1_0 = v0_1;
                }
                v4 = this.zzc(p7, p8, p9);
                if ((v4 != null) && (v1_0 != null)) {
                    com.google.firebase.iid.zzd.baF.zza(this.aat, p7, p8, v4, com.google.firebase.iid.zzd.aav);
                }
            }
            return v4;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzd.zzc():


    public String zzc(String p3, String p4, android.os.Bundle p5)
    {
        if (p4 != null) {
            p5.putString("scope", p4);
        }
        String v0_1;
        p5.putString("sender", p3);
        if (!"".equals(this.aat)) {
            v0_1 = this.aat;
        } else {
            v0_1 = p3;
        }
        if (!p5.containsKey("legacy.register")) {
            p5.putString("subscription", p3);
            p5.putString("subtype", v0_1);
            p5.putString("X-subscription", p3);
            p5.putString("X-subtype", v0_1);
        }
        return com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p5, this.zzblw()));
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getToken', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.getToken():


    public String getToken()
    {
        String v0 = this.zzcwt();
        if (v0 == null) {
            com.google.firebase.iid.FirebaseInstanceIdService.zzen(this.bau.getApplicationContext());
        }
        return v0;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'deleteToken', '(Ljava/lang/String; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.deleteToken():


    public void deleteToken(String p3, String p4)
    {
        this.bav.zzb(p3, p4, 0);
        return;
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'deleteToken', '(Ljava/lang/String; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.deleteToken():


    public void deleteToken(String p3, String p4)
    {
        this.bav.zzb(p3, p4, 0);
        return;
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'deleteToken', '(Ljava/lang/String; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.deleteToken():


    public void deleteToken(String p3, String p4)
    {
        this.bav.zzb(p3, p4, 0);
        return;
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'com.google.example.invalidpackage' ==>>> Sink '['Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'deleteInstanceId', '()V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzs', '(Landroid/content/Intent;)V'), ('Landroid/content/Intent;', 'setPackage', '(Ljava/lang/String;)Landroid/content/Intent;')]]

Use of a string value com.google.example.invalidpackage to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.deleteInstanceId():


    public void deleteInstanceId()
    {
        this.bav.zzb("*", "*", 0);
        this.bav.zzblx();
        return;
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzs():


    declared_synchronized void zzs(android.content.Intent p5)
    {
        try {
            if (this.Zq == null) {
                String v0_5 = new android.content.Intent();
                v0_5.setPackage("com.google.example.invalidpackage");
                this.Zq = android.app.PendingIntent.getBroadcast(this.zzagf, 0, v0_5, 0);
            }
        } catch (String v0_2) {
            throw v0_2;
        }
        p5.putExtra("app", this.Zq);
        return;
    }

Method android.content.Intent.setPackage() not found.

[TAINT] String 'google.messenger' ==>>> Sink '['Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'deleteInstanceId', '()V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/content/Intent; Ljava/lang/String;)V'), ('Landroid/content/Intent;', 'putExtra', '(Ljava/lang/String; Landroid/os/Parcelable;)Landroid/content/Intent;')]]

Use of a string value google.messenger to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.deleteInstanceId():


    public void deleteInstanceId()
    {
        this.bav.zzb("*", "*", 0);
        this.bav.zzblx();
        return;
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.zzf.zzb():


    protected void zzb(android.content.Intent p7, String p8)
    {
        this.aaN = android.os.SystemClock.elapsedRealtime();
        p7.putExtra("kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        p7.putExtra("X-kid", new StringBuilder((String.valueOf(p8).length() + 5)).append("|ID|").append(p8).append("|").toString());
        String v0_4 = "com.google.android.gsf".equals(com.google.firebase.iid.zzf.aaG);
        if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
            String v2_9 = String.valueOf(p7.getExtras());
            android.util.Log.d("InstanceID/Rpc", new StringBuilder((String.valueOf(v2_9).length() + 8)).append("Sending ").append(v2_9).toString());
        }
        if (v0_4 == null) {
            p7.putExtra("google.messenger", this.Zu);
            if ((this.aaL != null) || (this.aaM != null)) {
                String v0_8 = android.os.Message.obtain();
                v0_8.obj = p7;
                try {
                    if (this.aaL == null) {
                        this.aaM.send(v0_8);
                        return;
                    } else {
                        this.aaL.send(v0_8);
                        return;
                    }
                } catch (String v0) {
                    if (android.util.Log.isLoggable("InstanceID/Rpc", 3)) {
                        android.util.Log.d("InstanceID/Rpc", "Messenger failed, fallback to startService");
                    }
                }
            }
            this.zzagf.startService(p7);
        } else {
            this.zzagf.startService(p7);
        }
        return;
    }

Method android.content.Intent.putExtra() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'deleteInstanceId', '()V'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Ljava/lang/String; Ljava/lang/String; Landroid/os/Bundle;)V'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zzb', '(Landroid/os/Bundle; Ljava/security/KeyPair;)Landroid/content/Intent;'), ('Lcom/google/firebase/iid/zzf;', 'zza', '(Landroid/os/Bundle; Ljava/security/KeyPair; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.deleteInstanceId():


    public void deleteInstanceId()
    {
        this.bav.zzb("*", "*", 0);
        this.bav.zzblx();
        return;
    }

Method com.google.firebase.iid.zzd.zzb():


    public void zzb(String p4, String p5, android.os.Bundle p6)
    {
        if (android.os.Looper.getMainLooper() != android.os.Looper.myLooper()) {
            com.google.firebase.iid.zzd.baF.zzj(this.aat, p4, p5);
            if (p6 == null) {
                p6 = new android.os.Bundle();
            }
            p6.putString("sender", p4);
            if (p5 != null) {
                p6.putString("scope", p5);
            }
            android.content.Intent v0_8;
            p6.putString("subscription", p4);
            p6.putString("delete", "1");
            p6.putString("X-delete", "1");
            if (!"".equals(this.aat)) {
                v0_8 = this.aat;
            } else {
                v0_8 = p4;
            }
            p6.putString("subtype", v0_8);
            if (!"".equals(this.aat)) {
                p4 = this.aat;
            }
            p6.putString("X-subtype", p4);
            com.google.firebase.iid.zzd.baG.zzt(com.google.firebase.iid.zzd.baG.zza(p6, this.zzblw()));
            return;
        } else {
            throw new java.io.IOException("MAIN_THREAD");
        }
    }

Method com.google.firebase.iid.zzf.zza():


    android.content.Intent zza(android.os.Bundle p3, java.security.KeyPair p4)
    {
        android.content.Intent v0 = this.zzb(p3, p4);
        if ((v0 != null) && (v0.hasExtra("google.messenger"))) {
            v0 = this.zzb(p3, p4);
        }
        return v0;
    }

Method com.google.firebase.iid.zzf.zzb():


    private android.content.Intent zzb(android.os.Bundle p6, java.security.KeyPair p7)
    {
        java.io.IOException v0_1 = new android.os.ConditionVariable();
        String v1_3 = com.google.firebase.iid.zzf.zzbmc();
        this.getClass();
        this.aaK.put(v1_3, v0_1);
        this.zza(p6, p7, v1_3);
        v0_1.block(30000);
        this.getClass();
        try {
            java.io.IOException v0_4 = this.aaK.remove(v1_3);
        } catch (java.io.IOException v0_11) {
            throw v0_11;
        }
        if (!(v0_4 instanceof android.content.Intent)) {
            if (!(v0_4 instanceof String)) {
                java.io.IOException v0_5 = String.valueOf(v0_4);
                android.util.Log.w("InstanceID/Rpc", new StringBuilder((String.valueOf(v0_5).length() + 12)).append("No response ").append(v0_5).toString());
                throw new java.io.IOException("TIMEOUT");
            } else {
                throw new java.io.IOException(((String) v0_4));
            }
        } else {
            return ((android.content.Intent) v0_4);
        }
    }

Method com.google.firebase.iid.zzf.zza():


    public void zza(android.os.Bundle p7, java.security.KeyPair p8, String p9)
    {
        android.content.Intent v0_0 = android.os.SystemClock.elapsedRealtime();
        if ((this.aaR == 0) || (v0_0 > this.aaR)) {
            this.zzbmb();
            if (com.google.firebase.iid.zzf.aaG != null) {
                this.aaN = android.os.SystemClock.elapsedRealtime();
                android.content.Intent v0_9 = new android.content.Intent("com.google.android.c2dm.intent.REGISTER");
                v0_9.setPackage(com.google.firebase.iid.zzf.aaG);
                p7.putString("gmsv", Integer.toString(com.google.firebase.iid.zzf.zzdj(this.zzagf)));
                p7.putString("osv", Integer.toString(android.os.Build$VERSION.SDK_INT));
                p7.putString("app_ver", Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(this.zzagf)));
                p7.putString("app_ver_name", com.google.firebase.iid.FirebaseInstanceId.zzdg(this.zzagf));
                p7.putString("cliv", "fiid-9452000");
                p7.putString("appid", com.google.firebase.iid.FirebaseInstanceId.zza(p8));
                String v1_12 = com.google.firebase.iid.FirebaseInstanceId.zzem(this.zzagf);
                if (v1_12 != null) {
                    p7.putString("gmp_app_id", v1_12);
                }
                String v1_15 = com.google.firebase.iid.FirebaseInstanceId.zzu(p8.getPublic().getEncoded());
                p7.putString("pub2", v1_15);
                String[] v3_1 = new String[2];
                v3_1[0] = this.zzagf.getPackageName();
                v3_1[1] = v1_15;
                p7.putString("sig", com.google.firebase.iid.zzf.zza(p8, v3_1));
                v0_9.putExtras(p7);
                this.zzs(v0_9);
                this.zzb(v0_9, p9);
                return;
            } else {
                throw new java.io.IOException("MISSING_INSTANCEID_SERVICE");
            }
        } else {
            android.util.Log.w("InstanceID/Rpc", new StringBuilder(78).append("Backoff mode, next request attempt: ").append((this.aaR - v0_0)).append(" interval: ").append(this.aaQ).toString());
            throw new java.io.IOException("RETRY_LATER");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzem', '(Landroid/content/Context;)Ljava/lang/String;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzem():


    static String zzem(android.content.Context p1)
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance().bau.getOptions().getApplicationId();
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zzdh', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zzdh():


    static void zzdh(android.content.Context p3)
    {
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.setPackage(p3.getPackageName());
        v0_1.putExtra("CMD", "SYNC");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/iid/FirebaseInstanceId;', '<init>', '(Lcom/google/firebase/FirebaseApp; Lcom/google/firebase/iid/zzd;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/FirebaseInstanceId;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceIdService;', 'zzen', '(Landroid/content/Context;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.iid.FirebaseInstanceId.<init>():


    private FirebaseInstanceId(com.google.firebase.FirebaseApp p3, com.google.firebase.iid.zzd p4)
    {
        this.bau = p3;
        this.bav = p4;
        this.baw = this.zzcws();
        if (this.baw != null) {
            com.google.firebase.iid.FirebaseInstanceIdService.zza(this.bau.getApplicationContext(), this);
            return;
        } else {
            throw new IllegalStateException("IID failing to initialize, FirebaseApp is missing project ID");
        }
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zza():


    static void zza(android.content.Context p2, com.google.firebase.iid.FirebaseInstanceId p3)
    {
        if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
            if ((p3.zzcwt() == null) || (p3.zzcwv().zzcxa() != null)) {
                com.google.firebase.iid.FirebaseInstanceIdService.zzen(p2);
            }
        } else {
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceIdService.zzen():


    static void zzen(android.content.Context p2)
    {
        if (com.google.firebase.iid.zzf.zzdi(p2) != null) {
            try {
                if (!com.google.firebase.iid.FirebaseInstanceIdService.baB) {
                    p2.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdService.zzafa(0));
                    com.google.firebase.iid.FirebaseInstanceIdService.baB = 1;
                }
            } catch (int v0_2) {
                throw v0_2;
            }
        }
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/crash/internal/zzh;', 'uncaughtException', '(Ljava/lang/Thread; Ljava/lang/Throwable;)V'), ('Lcom/google/firebase/crash/FirebaseCrash;', 'zzg', '(Ljava/lang/Throwable;)V'), ('Lcom/google/firebase/crash/FirebaseCrash;', 'zzcmh', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzc;', 'zzcwr', '()Lcom/google/firebase/iid/zzc;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.crash.internal.zzh.uncaughtException():


    public void uncaughtException(Thread p4, Throwable p5)
    {
        android.util.Log.e("UncaughtException", "", p5);
        try {
            this.aOq.zzg(p5);
        } catch (Thread$UncaughtExceptionHandler v0_5) {
            android.util.Log.v("UncaughtException", v0_5.getMessage());
        } catch (Thread$UncaughtExceptionHandler v0_1) {
            android.util.Log.e("UncaughtException", "Ouch!  My own exception handler threw an exception.", v0_1);
        }
        if (this.aOr != null) {
            this.aOr.uncaughtException(p4, p5);
        }
        return;
    }

Method com.google.firebase.crash.FirebaseCrash.zzg():


    public void zzg(Throwable p7)
    {
        if (this.isEnabled()) {
            android.os.RemoteException v0_4 = this.zzcme();
            try {
                if ((v0_4 != null) && (p7 != null)) {
                    this.aOk.zza(1, System.currentTimeMillis());
                    try {
                        Thread.sleep(200);
                    } catch (com.google.android.gms.dynamic.zzd v1) {
                        Thread.currentThread().interrupt();
                    }
                    v0_4.zzrf(this.zzcmh());
                    v0_4.zzan(com.google.android.gms.dynamic.zze.zzac(p7));
                }
            } catch (android.os.RemoteException v0_1) {
                android.util.Log.e(com.google.firebase.crash.FirebaseCrash.LOG_TAG, "report remoting failed", v0_1);
            }
            return;
        } else {
            throw new com.google.firebase.crash.internal.zzb("Firebase Crash Reporting is disabled.");
        }
    }

Method com.google.firebase.crash.FirebaseCrash.zzcmh():


    private String zzcmh()
    {
        return com.google.firebase.iid.zzc.zzcwr().getId();
    }

Method com.google.firebase.iid.zzc.zzcwr():


    public static com.google.firebase.iid.zzc zzcwr()
    {
        return new com.google.firebase.iid.zzc(com.google.firebase.iid.FirebaseInstanceId.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/crash/FirebaseCrash;', 'zzg', '(Ljava/lang/Throwable;)V'), ('Lcom/google/firebase/crash/FirebaseCrash;', 'zzcmh', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzc;', 'zzcwr', '()Lcom/google/firebase/iid/zzc;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.crash.FirebaseCrash.zzg():


    public void zzg(Throwable p7)
    {
        if (this.isEnabled()) {
            android.os.RemoteException v0_4 = this.zzcme();
            try {
                if ((v0_4 != null) && (p7 != null)) {
                    this.aOk.zza(1, System.currentTimeMillis());
                    try {
                        Thread.sleep(200);
                    } catch (com.google.android.gms.dynamic.zzd v1) {
                        Thread.currentThread().interrupt();
                    }
                    v0_4.zzrf(this.zzcmh());
                    v0_4.zzan(com.google.android.gms.dynamic.zze.zzac(p7));
                }
            } catch (android.os.RemoteException v0_1) {
                android.util.Log.e(com.google.firebase.crash.FirebaseCrash.LOG_TAG, "report remoting failed", v0_1);
            }
            return;
        } else {
            throw new com.google.firebase.crash.internal.zzb("Firebase Crash Reporting is disabled.");
        }
    }

Method com.google.firebase.crash.FirebaseCrash.zzcmh():


    private String zzcmh()
    {
        return com.google.firebase.iid.zzc.zzcwr().getId();
    }

Method com.google.firebase.iid.zzc.zzcwr():


    public static com.google.firebase.iid.zzc zzcwr()
    {
        return new com.google.firebase.iid.zzc(com.google.firebase.iid.FirebaseInstanceId.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/crash/FirebaseCrash;', 'zzf', '(Ljava/lang/Throwable;)V'), ('Lcom/google/firebase/crash/FirebaseCrash;', 'zzcmh', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzc;', 'zzcwr', '()Lcom/google/firebase/iid/zzc;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.crash.FirebaseCrash.zzf():


    public void zzf(Throwable p7)
    {
        if (this.isEnabled()) {
            android.os.RemoteException v0_4 = this.zzcme();
            if ((v0_4 != null) && (p7 != null)) {
                this.aOk.zza(0, System.currentTimeMillis());
                try {
                    v0_4.zzrf(this.zzcmh());
                    v0_4.zzam(com.google.android.gms.dynamic.zze.zzac(p7));
                } catch (android.os.RemoteException v0_1) {
                    android.util.Log.e(com.google.firebase.crash.FirebaseCrash.LOG_TAG, "report remoting failed", v0_1);
                }
            }
            return;
        } else {
            throw new com.google.firebase.crash.internal.zzb("Firebase Crash Reporting is disabled.");
        }
    }

Method com.google.firebase.crash.FirebaseCrash.zzcmh():


    private String zzcmh()
    {
        return com.google.firebase.iid.zzc.zzcwr().getId();
    }

Method com.google.firebase.iid.zzc.zzcwr():


    public static com.google.firebase.iid.zzc zzcwr()
    {
        return new com.google.firebase.iid.zzc(com.google.firebase.iid.FirebaseInstanceId.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/crash/FirebaseCrash;', 'zzcmh', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzc;', 'zzcwr', '()Lcom/google/firebase/iid/zzc;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.crash.FirebaseCrash.zzcmh():


    private String zzcmh()
    {
        return com.google.firebase.iid.zzc.zzcwr().getId();
    }

Method com.google.firebase.iid.zzc.zzcwr():


    public static com.google.firebase.iid.zzc zzcwr()
    {
        return new com.google.firebase.iid.zzc(com.google.firebase.iid.FirebaseInstanceId.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.

[TAINT] String 'com.google.firebase.INSTANCE_ID_EVENT' ==>>> Sink '['Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V', '0', 'IPC_SINK']' [[('Lcom/google/firebase/crash/FirebaseCrash;', 'report', '(Ljava/lang/Throwable;)V'), ('Lcom/google/firebase/crash/FirebaseCrash;', 'zzf', '(Ljava/lang/Throwable;)V'), ('Lcom/google/firebase/crash/FirebaseCrash;', 'zzcmh', '()Ljava/lang/String;'), ('Lcom/google/firebase/iid/zzc;', 'zzcwr', '()Lcom/google/firebase/iid/zzc;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '()Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'getInstance', '(Lcom/google/firebase/FirebaseApp;)Lcom/google/firebase/iid/FirebaseInstanceId;'), ('Lcom/google/firebase/iid/zzd;', 'zzb', '(Landroid/content/Context; Landroid/os/Bundle;)Lcom/google/firebase/iid/zzd;'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context;)V'), ('Lcom/google/firebase/iid/zzg;', '<init>', '(Landroid/content/Context; Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/zzg;', 'zzkf', '(Ljava/lang/String;)V'), ('Lcom/google/firebase/iid/FirebaseInstanceId;', 'zza', '(Landroid/content/Context; Lcom/google/firebase/iid/zzg;)V'), ('Landroid/content/Context;', 'sendBroadcast', '(Landroid/content/Intent;)V')]]

Use of a string value com.google.firebase.INSTANCE_ID_EVENT to construct an Intent

Method com.google.firebase.crash.FirebaseCrash.report():


    public static void report(Throwable p2)
    {
        try {
            com.google.firebase.crash.FirebaseCrash.zzcmd().zzf(p2);
        } catch (String v0_1) {
            android.util.Log.v(com.google.firebase.crash.FirebaseCrash.LOG_TAG, v0_1.getMessage());
        }
        return;
    }

Method com.google.firebase.crash.FirebaseCrash.zzf():


    public void zzf(Throwable p7)
    {
        if (this.isEnabled()) {
            android.os.RemoteException v0_4 = this.zzcme();
            if ((v0_4 != null) && (p7 != null)) {
                this.aOk.zza(0, System.currentTimeMillis());
                try {
                    v0_4.zzrf(this.zzcmh());
                    v0_4.zzam(com.google.android.gms.dynamic.zze.zzac(p7));
                } catch (android.os.RemoteException v0_1) {
                    android.util.Log.e(com.google.firebase.crash.FirebaseCrash.LOG_TAG, "report remoting failed", v0_1);
                }
            }
            return;
        } else {
            throw new com.google.firebase.crash.internal.zzb("Firebase Crash Reporting is disabled.");
        }
    }

Method com.google.firebase.crash.FirebaseCrash.zzcmh():


    private String zzcmh()
    {
        return com.google.firebase.iid.zzc.zzcwr().getId();
    }

Method com.google.firebase.iid.zzc.zzcwr():


    public static com.google.firebase.iid.zzc zzcwr()
    {
        return new com.google.firebase.iid.zzc(com.google.firebase.iid.FirebaseInstanceId.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static com.google.firebase.iid.FirebaseInstanceId getInstance()
    {
        return com.google.firebase.iid.FirebaseInstanceId.getInstance(com.google.firebase.FirebaseApp.getInstance());
    }

Method com.google.firebase.iid.FirebaseInstanceId.getInstance():


    public static declared_synchronized com.google.firebase.iid.FirebaseInstanceId getInstance(com.google.firebase.FirebaseApp p4)
    {
        try {
            com.google.firebase.iid.FirebaseInstanceId v0_6 = ((com.google.firebase.iid.FirebaseInstanceId) com.google.firebase.iid.FirebaseInstanceId.aap.get(p4.getOptions().getApplicationId()));
        } catch (com.google.firebase.iid.FirebaseInstanceId v0_7) {
            throw v0_7;
        }
        if (v0_6 == null) {
            java.util.Map v2_1 = com.google.firebase.iid.zzd.zzb(p4.getApplicationContext(), 0);
            if (com.google.firebase.iid.FirebaseInstanceId.bat == null) {
                com.google.firebase.iid.FirebaseInstanceId.bat = new com.google.firebase.iid.zze(v2_1.zzcwy());
            }
            v0_6 = new com.google.firebase.iid.FirebaseInstanceId(p4, v2_1);
            com.google.firebase.iid.FirebaseInstanceId.aap.put(p4.getOptions().getApplicationId(), v0_6);
        }
        return v0_6;
    }

Method com.google.firebase.iid.zzd.zzb():


    public static declared_synchronized com.google.firebase.iid.zzd zzb(android.content.Context p4, android.os.Bundle p5)
    {
        try {
            com.google.firebase.iid.zzd v0_13;
            if (p5 != null) {
                v0_13 = p5.getString("subtype");
            } else {
                v0_13 = "";
            }
        } catch (com.google.firebase.iid.zzd v0_12) {
            throw v0_12;
        }
        String v1;
        if (v0_13 != null) {
            v1 = v0_13;
        } else {
            v1 = "";
        }
        java.util.Map v3_0 = p4.getApplicationContext();
        if (com.google.firebase.iid.zzd.baF == null) {
            com.google.firebase.iid.zzd.baF = new com.google.firebase.iid.zzg(v3_0);
            com.google.firebase.iid.zzd.baG = new com.google.firebase.iid.zzf(v3_0);
        }
        com.google.firebase.iid.zzd.aav = Integer.toString(com.google.firebase.iid.FirebaseInstanceId.zzdf(v3_0));
        com.google.firebase.iid.zzd v0_10 = ((com.google.firebase.iid.zzd) com.google.firebase.iid.zzd.aap.get(v1));
        if (v0_10 == null) {
            v0_10 = new com.google.firebase.iid.zzd(v3_0, v1, p5);
            com.google.firebase.iid.zzd.aap.put(v1, v0_10);
        }
        return v0_10;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p2)
    {
        this(p2, "com.google.android.gms.appid");
        return;
    }

Method com.google.firebase.iid.zzg.<init>():


    public zzg(android.content.Context p4, String p5)
    {
        String v0_2;
        this.zzagf = p4;
        this.aaT = p4.getSharedPreferences(p5, 4);
        String v1 = String.valueOf(p5);
        String v0_0 = String.valueOf("-no-backup");
        if (v0_0.length() == 0) {
            v0_2 = new String(v1);
        } else {
            v0_2 = v1.concat(v0_0);
        }
        this.zzkf(v0_2);
        return;
    }

Method com.google.firebase.iid.zzg.zzkf():


    private void zzkf(String p5)
    {
        String v1_5 = new java.io.File(com.google.android.gms.common.util.zzx.getNoBackupFilesDir(this.zzagf), p5);
        try {
            if ((!v1_5.exists()) && ((v1_5.createNewFile()) && (!this.isEmpty()))) {
                android.util.Log.i("InstanceID/Store", "App restored, clearing state");
                com.google.firebase.iid.FirebaseInstanceId.zza(this.zzagf, this);
            }
        } catch (String v0_2) {
            if (!android.util.Log.isLoggable("InstanceID/Store", 3)) {
            } else {
                String v0_5 = String.valueOf(v0_2.getMessage());
                if (v0_5.length() == 0) {
                    String v0_7 = new String("Error creating file in no backup dir: ");
                    android.util.Log.d("InstanceID/Store", v0_7);
                } else {
                    v0_7 = "Error creating file in no backup dir: ".concat(v0_5);
                }
            }
        }
        return;
    }

Method com.google.firebase.iid.FirebaseInstanceId.zza():


    static void zza(android.content.Context p3, com.google.firebase.iid.zzg p4)
    {
        p4.zzbmd();
        android.content.Intent v0_1 = new android.content.Intent();
        v0_1.putExtra("CMD", "RST");
        p3.sendBroadcast(com.google.firebase.iid.FirebaseInstanceIdInternalReceiver.zzh(p3, v0_1));
        return;
    }

Method android.content.Context.sendBroadcast() not found.