Binary Ninja Workflows: Fixing branch obfuscation
If you've been reversing x86/x64 for a while then you will have definitely come across functions that end like this: We know two things here: The RET/RETN opcode in x86/x64 pops the stack and jumps to that address The PUSH before the return here i...
Oct 30, 20236 min read2.4K