WinDbg shows RET Instruction
7c901042 c20400 ret 4 7c901045 52 push edx 7c901046 e8447f0100 call ntdll!RtlpWaitForCriticalSection (7c918f8f) 7c90104b 648b0d18000000 mov ecx,dword ptr fs:[18h] 7c901052 8b542404 mov edx,dword ptr [esp+4] 7c901056 ebc4 jmp ntdll!RtlEnterCriticalSection+0x17 (7c90101c) 7c901058 8da42400000000 lea esp,[esp] 7c90105f 8d9b00000000 lea ebx,[ebx] 7c901065 8b4124 mov eax,dword ptr [ecx+24h] 7c901068 39420c cmp dword ptr [edx+0Ch],eax 7c90106b 751b jne ntdll!RtlEnterCriticalSection+0x80 (7c901088) 7c90106d f0ff4204 lock inc dword ptr [edx+4] 7c901071 ff4208 inc dword ptr [edx+
7c901042 c20400 ret 4
Process Involved
VLC Media Player (windows version).
Explanation
The RET instruction can be used to execute three different types of returns: Near return A return to a calling procedure within the current code segment (the segment currently pointed to by the CS register), sometimes referred to as an intrasegment return. Far return A return to a calling procedure located in a different segment than the current code segment, sometimes referred to as an intersegment return. Inter-privilege-level far return A far return to a different privilege level than that of the currently executing program or procedure. source : http://siyobik.info/index.php?module=x86&id=280