After patching, not all endpoints can be monitored in Charles proxy

[mikebgrep]

I managed to patch an apk file with the tool after some modifications on the AndroidManifest.xml file .
After I connect the device to Charles, I can't see all endpoints related to the app unencrypted.
Appear that almost all endpoints are decrypted within the ssl connection, but the mobile app api endpoints are encrypted.
Is not from Charles as I allow all traffic to be ssl decrypted (no filters).
The APK file was split, but it ran on the device no matter that I got wringing during the patching.
Any hint why the mobile API endpoints are encrypted.

[Giasinit]

up