Hi MAXUS Europe (Maxus eTerron 9): tenant ID / REST URI, or an old unpacked APK?

[martindamboeck-cpu]

Hi @tisoft and everyone,

I own a Maxus eTerron 9 (EU) and would like to read SOC / charging status
into Home Assistant via the SAIC gateway.

What I found so far:

• App: "Hi MAXUS Europe", package com.saicmaxus.ismarteu, v2.0.2 (build 19),
  published by SAIC Overseas Intelligent Mobility Technology - same developer
  and support address as MG iSMART EU (com.saicmotor.iov.europe).
• Its privacy page is on page.soimt.com, the same domain family as
  tap-eu.soimt.com / gateway-mg-eu.soimt.com, and the app resources contain
  the theme name "Soimtthailandbom2", so it looks like the same white-label
  SOIMT codebase.
• The app shows the SOC of my car, so the backend has the data.
• The current APK is packed with iJiami (application class s.h.e.l.l.S,
  classes.dex only 13 KB, ijiami.dat / ijiami.ajm / libexec*.so present),
  so static analysis finds no host and no tenant ID.

Questions:

1. Does anyone know SAIC_TENANT_ID and SAIC_REST_URI for Hi MAXUS Europe
   (or Hi LDV)?
2. @tisoft, you found an older unencrypted India app in discussion SAIC URI Database #8 -
   do you know whether early Hi MAXUS Europe versions (1.0.x, 2024) were
   unpacked, and where to get them?
3. Has anyone dumped the unpacked dex or captured the login request?

I can test on a real vehicle and share logs.
Thanks!

[martindamboeck-cpu]

Additional finding: the app's main activity is
com.saicmotor.ismartthai.ui.tab_bar.activity.V2MainActivity, so Hi MAXUS
Europe appears to be built from the MG iSmart Thailand codebase. @tisoft,
since you read the Thai app: does its login / token request differ from the
EU one in a way that might explain why the gateway cannot log in with a
Hi MAXUS account?

[tisoft]

on ios i used ProxyMan to get the rewust it makes to login.
https://opt-svc.soimt.com/api.app/v1/user/region?userName=XXX&packageName=com.saicmaxus.ismarteu
teneant-id: 590224

this looks like the other "new API" saic stuff. it has the APP-VERIFICATION_STRING etc, so it could maybe work. I did not create an account so could not test any further.

Unfortunalty all app versions are encrypted.