An application I am currently looking add is using Threads and accessing something via the thread-local storage. It is compiled with Visual C++ (probably 6.0).
First question would be, where can I find more information what the thread-local storage contains? I haven't quite understood it yet.
This is the assembler code where the application reads a value from the thread-local storage.
MOV EAX,0 MOV ECX,DWORD PTR FS:[0x2C] MOV EDX,DWORD PTR DS:[ECX + EAX * 4] MOV EAX,DWORD PTR DS:[EDX+4]
EAX is a pointer which points on the following memory area which has a special pattern.
It basically looks like this:
52 P->... P->... 5 52 P->... P->... 5 52 P->... P->... 5
I was wondering if this is some kind of standard data structure.