j
k
j a
j l
See 2126. I fear this is intractable, because you *cannot* make any calls into libc before restoring its TLS registers, and we cannot restore the TLS registers without the TEB.
Back to the thread
Back to the list