I suggest looking into the Obfusicated C contest before relying on your own reading of code to verify lack of malicious intent.