We all know that call invokes a function and ret returns to the caller. Alas, nothing is certain in the binary world. The ret instruction is quite often used for short jumps within a function. Among many other improvements in IDA v5.1 there will be a special logic to recognize and mark such pseudo-returns. I was surprised to see this graph and post it here for your amusement:
Please note the underlined ret and be prepared for unusual cross-references in your scripts 🙂
Stay up-to-date with the latest news!
Stay up to date with the newest blog posts.