LEAVE Instruction ++

WinDbg shows “leave” instruction

7c901227 c9              leave
7c901228 c20400          ret     4
7c90122b 90              nop
7c90122c 90              nop
7c90122d 90              nop
7c90122e 90              nop
7c90122f 90              nop
ntdll!DbgBreakPoint:
7c901230 cc              int     3

7c901227 c9 leave

Process Involved

Program :  "notepad" on Windows.

Explanation

LEAVE -- High Level Procedure Exit
LEAVE reverses the actions of the ENTER instruction. By copying the
frame pointer to the stack pointer, LEAVE releases the stack space
used by a procedure for its local variables.

source : http://www.cs.uaf.edu/~cs301/notes/Chapter9/node11.html
source : http://d3s.mff.cuni.cz/~ceres/sch/osy/text/ch03s02s02.php
source : http://pdos.csail.mit.edu/6.858/2010/readings/i386/ENTER.htm
source : http://pdos.csail.mit.edu/6.858/2010/readings/i386/LEAVE.htm