Or more like this really

• ptrr = pointer to ret instruction

• ret will originally contain a ptrr, but its displayed as [ret] so as not to confuse, or to confuse, i never know really.

• • ----------------------------------------------------------------------------
  • [buffer] [ebp] [ret] [ptrr] [ptrr] [ptrr] [ptrr] [pointer_to_buffer]
  • ----------------------------------------------------------------------------