Unable to decompile push ret as jmp

[ljn917]

It looks like RetDec cannot decompile push+ret as a jump or call. Do I need some command line options to enable it? A sample code is attached.

BTW, I guess this is not really decompilation as compilers usually do not generate push ret sequence. But it is useful to analyze obfuscated code.

# gcc -g push-ret.S -m32 -o push-ret

	.section	.data
.STR0:
	.string	"print"

	.section	.text
	.globl	myprint
myprint:
	pushl	%ebp
	movl	%esp, %ebp
	pushl	$.STR0
	call	puts
	subl	$4, %esp
	leave
	ret

	.globl	main
main:
	pushl	%ebp
	movl	%esp, %ebp
	#call	myprint
	pushl   $retaddr
	pushl   $myprint
	ret
retaddr:
	xorl	%eax, %eax
	leave
	ret

[PeterMatula]

Yes, this is currently true and it can not be enabled by command line options. I think that ret gets translated to return no matter what was pushed to stack. We need a better dataflow analysis. I will add this to the list of problems that should be solved by the new decoder in #116. I hope I will get to work on the new decoder shortly.