In assembly language, to return from a function, you use the ret instruction. This instruction pops the address from the top of the stack; the popped address is placed in the eip register, and the control is transferred to the popped address.
8.3 Returning From Function
Get Learning Malware Analysis now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
