Comment by quesera

15 hours ago

Reverse engineering is easy when the source code is available. :)

The difference between source code in a high-level language, and AArch64 machine language, is surmountable. The effort is made easier if you can focus on calls to the crypto and networking libraries.

The source is available?

Understanding program flow is very different from understanding the composition of data passing though the program.

  • At some level, the machine code is the source code -- but decompiling AArch64 mobile apps into something like Java is common practice.

    As GP alludes, you would be looking for a secondary pathway for message transmission. This would be difficult to hide in AArch64 code (from a skilled practitioner), and extra difficult in decompiled Java.

    It would be "easy" enough, and an enormous prize, for anyone in the field.

    • I am familiar with disassembly and decompilation and what you just said is a huge handwave.

      > a secondary pathway for message transmission

      That's certainly the only way messages could be uploaded to Facebook!

      3 replies →