Originally posted by nextelbuddy
View Post
1: It's a monolithic function - the decompiled C code is 700 lines, this is much larger than most other functions which are much more modular in design.
2: It has repeated calls to lookup the same table values in different if/else statements. The rest of the binary is carefully written to prepare the inputs and do a single table lookup, but this one has clearly been written differently in a different style.
It will be a non-trivial exercise to reverse engineer it completely, however for your purpose the key would be to identify the various inputs and outputs, their relative locations in your target binary and go from there.
Leave a comment: