You should document what is this ret? "jmp esp" ? and the module it comes from.