RET instruction :)

WinDbg shows RET Instruction

7c901042 c20400          ret     4
7c901045 52              push    edx
7c901046 e8447f0100      call    ntdll!RtlpWaitForCriticalSection (7c918f8f)
7c90104b 648b0d18000000  mov     ecx,dword ptr fs:[18h]
7c901052 8b542404        mov     edx,dword ptr [esp+4]
7c901056 ebc4            jmp     ntdll!RtlEnterCriticalSection+0x17 (7c90101c)
7c901058 8da42400000000  lea     esp,[esp]
7c90105f 8d9b00000000    lea     ebx,[ebx]
7c901065 8b4124          mov     eax,dword ptr [ecx+24h]
7c901068 39420c          cmp     dword ptr [edx+0Ch],eax
7c90106b 751b            jne     ntdll!RtlEnterCriticalSection+0x80 (7c901088)
7c90106d f0ff4204        lock inc dword ptr [edx+4]
7c901071 ff4208          inc     dword ptr [edx+

7c901042 c20400 ret 4

Process Involved

VLC Media Player (windows version).


The RET instruction can be used to execute three different types of returns:

Near return
A return to a calling procedure within the current code segment (the
segment currently pointed to by the CS register), sometimes referred to
as an intrasegment return.

Far return
A return to a calling procedure located in a different segment than the
current code segment, sometimes referred to as an intersegment

Inter-privilege-level far return
A far return to a different privilege level than that of the currently
executing program or procedure.

source :