i try to analyze a program in assembly using ollydbg. In the first line i have the following:
MOV EAX, DWORD PTR FS:[0]
In the register window, i ve got the information:
EAX 7570EE0A kernel32.BaseThreadInitThunk
and in another window about FS the following:
FS:[00000000]=[7FFDF000]=0012FFC4
So, my questions would be:
What is the difference between
DWORD PTR FS
andDWORD PTR DS
? Normally, I always seeDWORD PTR DS
and notDWORD PTR FS
.What is
kernel32.BaseThreadInitThunk
? It is a function?
I hope that someone can help me.