Hex Rays
Hex Rays Blog —  State of the art code analysis

Does 'return' come back?

We all know that call invokes a function and ret returns to the caller. Alas, nothing is certain in the binary world. The ret instruction is quite often used for short jumps within a function. Among many other improvements in IDA v5.1 there will be a special logic to recognize and mark such pseudo-returns. I was surprised to see this graph and post it here for your amusement:


Please note the underlined ret and be prepared for unusual cross-references in your scripts 🙂

Go to top of page