i try to analyze a program in assembly using ollydbg. In the first line i have the following:
MOV EAX, DWORD PTR FS:
In the register window, i ve got the information:
EAX 7570EE0A kernel32.BaseThreadInitThunk
and in another window about FS the following:
So, my questions would be:
What is the difference between
DWORD PTR FSand
DWORD PTR DS? Normally, I always see
DWORD PTR DSand not
DWORD PTR FS.
kernel32.BaseThreadInitThunk? It is a function?
I hope that someone can help me.