adplus-dvertising
frame-decoration

Question

How is the current thread's TIB found in runtime on IA-32 processors?

a.

It is stored in a regular private-allocation user-mode memory

b.

It is available at FS:[0]

c.

It is stored in the IDT

d.

It is stored in the Windows kernel

Posted under Reverse Engineering

Answer: (b).It is available at FS:[0] Explanation:On IA-32 processors, the current thread's TIB is available at FS:[0].

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. How is the current thread's TIB found in runtime on IA-32 processors?