Tell Binja A Function Does Not Return?

[utkonos]

Up at the top, memory is allocated. Then the shellcode is written to the newly allocated memory. Finally, at the bottom, the shellcode is called. But this never returns. The instructions in grey should not be part of this function.

Is there a way to tell Binary Ninja that this function call does not return so that the analysis leaves the bytes after the call as data between functions?

This can be done by editing the mov to be a retn at address 0x982e82, but is there a way to do this without using a patch?

With this change, those incorrect continuation of... blocks disappear and all the correct functions are shown.

[rssor]

Right click on the call to shellcode, add a call type override, and append __noreturn.

[utkonos]

Beautiful. Thanks.

[utkonos]

Very nice.

[galenbwill]

There are two ways to mark the function itself as no-return:

1. Add __noreturn to the function's type signature (select function signature and hit Y to set the type)
2. Open function properties dialog ("Edit Function Properties..." in the right-click menu) and uncheck "Can Return".

More to the point of the question, as @rssor said, you can make it no-return for that specific call site by using call type override.

[rssor]

Function properties dialog can only be opened on a call to a known target, not at an indirect call site.

[galenbwill]

Thank you. I did not read the original question closely enough.

[utkonos]

Thanks, both of you.