DynamoRIO version 6.1.1, build 3, (c) DynamoRIO developers DynamoRIO built with: -DINTERNAL -DDEBUG -DDRSTATS_DEMO -DARM -DLINUX -DANDROID -DUNIX -DCLIENT_INTERFACE -DAPP_EXPORTS -DKSTATS -DHAVE_FVISIBILITY -DHAVE_TYPELIMITS_CONTROL -DDR_DO_NOT_DEFINE_uint -DDR__Bool_EXISTS -DASSEMBLE_WITH_GAS -DHAVE_MEMINFO -DHAVE_MEMINFO_MAPS -DHAVE_TLS -DHAVE_SIGALTSTACK -DUSE_VISIBILITY_ATTRIBUTES -DDYNAMORIO_IR_EXPORTS -DCUSTOM_TRACES -DCLIENT_SIDELINE -DDR_APP_EXPORTS -DDEBUG_MEMORY -DSTACK_GUARD_PAGE -DHEAP_ACCOUNTING -DDEADLOCK_AVOIDANCE -DSHARING_STUDY -DHASHTABLE_STATISTICS DynamoRIO built on: Apr 10 2016 18:05:53 THREAD 4454 (dcontext 0x4a4787a0) DR stack is 0x4a5b5000-0x4a5c3000 thread_locks=0x4a47e41c size=4 thread_stats=0x4a47e428 size=3344 make_unwritable: pc 0x4a5e5000 -> 0x4a5e5000-0x4a5e6000 signal stack is 0x4a5e5000 - 0x4a5f3000 TLS app lib base =0xb68ffdb0 TLS app alt base =0x00000000 TLS priv lib base =0x4a5c9048 TLS priv alt base =0x00000000 TLS DynamoRIO base=0x4a5c5000 post-TLS-setup, cur tpidruro base is 0x4a5c9048 post-TLS-setup, cur tpidrurw base is 0x00000000 hashtable_generic_init trace heads htable=0x4a5cd724 bits=9 size=513 mask=0x000001ff offset=0 load=75% resize=384 trace heads table 0x4a5cd828 0x00000000 groom=0% groom_at=0 hashtable_fragment_init bblock htable=0x4a479798 bits=5 size=33 mask=0x0000001f offset=0 load=60% resize=19 bblock table 0x4a5d5024 0x00000000 groom=0% groom_at=0 hashtable_fragment_init future htable=0x4a479948 bits=9 size=513 mask=0x000001ff offset=0 load=65% resize=333 future table 0x4a5d5128 0x00000000 groom=0% groom_at=0 hashtable_ibl_init ret_bb htable=0x4a4794d4 bits=6 size=65 mask=0x0000003f offset=0 load=60% resize=39 ret_bb table 0x4a5d5940 0x00000000 groom=0% groom_at=0 hashtable_ibl_init indcall_bb htable=0x4a4795c0 bits=6 size=65 mask=0x0000003f offset=0 load=60% resize=39 indcall_bb table 0x4a5d5b60 0x00000000 groom=0% groom_at=0 hashtable_ibl_init indjmp_bb htable=0x4a4796ac bits=6 size=65 mask=0x0000003f offset=0 load=60% resize=39 indjmp_bb table 0x4a5d5d80 0x00000000 groom=0% groom_at=0 patch_emitted_code start_pc=0x4a4ae0e0 pt=0x00000001 patch_emitted_code type=3 indirected, nothing to patch Just updated indirect branch lookup shared_bb_ibl_ret: 0x4a4ae0e0 f8ca 100c str %r1 -> +0x0c(%r10)[4byte] 0x4a4ae0e4 f84a 0c00 str %r0 -> (%r10)[4byte] 0x4a4ae0e8 f8da 1014 ldr +0x14(%r10)[4byte] -> %r1 0x4a4ae0ec f002 0001 and %r2 $0x00000001 -> %r0 0x4a4ae0f0 f100 0002 add %r0 $0x00000002 -> %r0 0x4a4ae0f4 f8c1 01b0 str %r0 -> +0x000001b0(%r1)[4byte] 0x4a4ae0f8 f022 0201 bic %r2 $0x00000001 -> %r2 0x4a4ae0fc f8da 104c ldr +0x4c(%r10)[4byte] -> %r1 0x4a4ae100 ea01 0102 and %r1 %r2 $0x00 -> %r1 0x4a4ae104 f8da 0050 ldr +0x50(%r10)[4byte] -> %r0 0x4a4ae108 eb00 01c1 add %r0 %r1 lsl $0x03 -> %r1 0x4a4ae10c 6808 ldr (%r1)[4byte] -> %r0 0x4a4ae10e b160 cbz $0x4a4ae12a %r0 0x4a4ae110 eba0 0002 sub %r0 %r2 $0x00 -> %r0 0x4a4ae114 b928 cbnz $0x4a4ae122 %r0 0x4a4ae116 6848 ldr +0x04(%r1)[4byte] -> %r0 0x4a4ae118 f8da 1004 ldr +0x04(%r10)[4byte] -> %r1 0x4a4ae11c f8da 2008 ldr +0x08(%r10)[4byte] -> %r2 0x4a4ae120 4700 bx %r0 0x4a4ae122 f851 0f08 ldr +0x08(%r1)[4byte] $0x00000008 %r1 -> %r0 %r1 0x4a4ae126 f7ff bff2 b $0x4a4ae10e 0x4a4ae12a 6848 ldr +0x04(%r1)[4byte] -> %r0 0x4a4ae12c f1a0 0001 sub %r0 $0x00000001 -> %r0 0x4a4ae130 b988 cbnz $0x4a4ae156 %r0 0x4a4ae132 f8da 1050 ldr +0x50(%r10)[4byte] -> %r1 0x4a4ae136 f7ff bfe9 b $0x4a4ae10c 0x4a4ae13a f84a 0c00 str %r0 -> (%r10)[4byte] 0x4a4ae13e f8ca 100c str %r1 -> +0x0c(%r10)[4byte] 0x4a4ae142 f8da 1014 ldr +0x14(%r10)[4byte] -> %r1 0x4a4ae146 f002 0001 and %r2 $0x00000001 -> %r0 0x4a4ae14a f100 0002 add %r0 $0x00000002 -> %r0 0x4a4ae14e f8c1 01b0 str %r0 -> +0x000001b0(%r1)[4byte] 0x4a4ae152 f022 0201 bic %r2 $0x00000001 -> %r2 0x4a4ae156 f8da 100c ldr +0x0c(%r10)[4byte] -> %r1 0x4a4ae15a 4608 mov %r1 -> %r0 0x4a4ae15c f8da 1004 ldr +0x04(%r10)[4byte] -> %r1 0x4a4ae160 f8ca 500c str %r5 -> +0x0c(%r10)[4byte] 0x4a4ae164 f8da 5014 ldr +0x14(%r10)[4byte] -> %r5 0x4a4ae168 f8c5 2164 str %r2 -> +0x00000164(%r5)[4byte] 0x4a4ae16c f8da 500c ldr +0x0c(%r10)[4byte] -> %r5 0x4a4ae170 f8da 2008 ldr +0x08(%r10)[4byte] -> %r2 0x4a4ae174 f8da f018 ldr +0x18(%r10)[4byte] -> %pc patch_emitted_code start_pc=0x4a4ae180 pt=0xb701d000 patch_emitted_code type=3 indirected, nothing to patch Just updated indirect branch lookup shared_bb_ibl_indcall: 0x4a4ae180 f8ca 100c str %r1 -> +0x0c(%r10)[4byte] 0x4a4ae184 f84a 0c00 str %r0 -> (%r10)[4byte] 0x4a4ae188 f8da 1014 ldr +0x14(%r10)[4byte] -> %r1 0x4a4ae18c f002 0001 and %r2 $0x00000001 -> %r0 0x4a4ae190 f100 0002 add %r0 $0x00000002 -> %r0 0x4a4ae194 f8c1 01b0 str %r0 -> +0x000001b0(%r1)[4byte] 0x4a4ae198 f022 0201 bic %r2 $0x00000001 -> %r2 0x4a4ae19c f8da 1054 ldr +0x54(%r10)[4byte] -> %r1 0x4a4ae1a0 ea01 0102 and %r1 %r2 $0x00 -> %r1 0x4a4ae1a4 f8da 0058 ldr +0x58(%r10)[4byte] -> %r0 0x4a4ae1a8 eb00 01c1 add %r0 %r1 lsl $0x03 -> %r1 0x4a4ae1ac 6808 ldr (%r1)[4byte] -> %r0 0x4a4ae1ae b160 cbz $0x4a4ae1ca %r0 0x4a4ae1b0 eba0 0002 sub %r0 %r2 $0x00 -> %r0 0x4a4ae1b4 b928 cbnz $0x4a4ae1c2 %r0 0x4a4ae1b6 6848 ldr +0x04(%r1)[4byte] -> %r0 0x4a4ae1b8 f8da 1004 ldr +0x04(%r10)[4byte] -> %r1 0x4a4ae1bc f8da 2008 ldr +0x08(%r10)[4byte] -> %r2 0x4a4ae1c0 4700 bx %r0 0x4a4ae1c2 f851 0f08 ldr +0x08(%r1)[4byte] $0x00000008 %r1 -> %r0 %r1 0x4a4ae1c6 f7ff bff2 b $0x4a4ae1ae 0x4a4ae1ca 6848 ldr +0x04(%r1)[4byte] -> %r0 0x4a4ae1cc f1a0 0001 sub %r0 $0x00000001 -> %r0 0x4a4ae1d0 b988 cbnz $0x4a4ae1f6 %r0 0x4a4ae1d2 f8da 1058 ldr +0x58(%r10)[4byte] -> %r1 0x4a4ae1d6 f7ff bfe9 b $0x4a4ae1ac 0x4a4ae1da f84a 0c00 str %r0 -> (%r10)[4byte] 0x4a4ae1de f8ca 100c str %r1 -> +0x0c(%r10)[4byte] 0x4a4ae1e2 f8da 1014 ldr +0x14(%r10)[4byte] -> %r1 0x4a4ae1e6 f002 0001 and %r2 $0x00000001 -> %r0 0x4a4ae1ea f100 0002 add %r0 $0x00000002 -> %r0 0x4a4ae1ee f8c1 01b0 str %r0 -> +0x000001b0(%r1)[4byte] 0x4a4ae1f2 f022 0201 bic %r2 $0x00000001 -> %r2 0x4a4ae1f6 f8da 100c ldr +0x0c(%r10)[4byte] -> %r1 0x4a4ae1fa 4608 mov %r1 -> %r0 0x4a4ae1fc f8da 1004 ldr +0x04(%r10)[4byte] -> %r1 0x4a4ae200 f8ca 500c str %r5 -> +0x0c(%r10)[4byte] 0x4a4ae204 f8da 5014 ldr +0x14(%r10)[4byte] -> %r5 0x4a4ae208 f8c5 2164 str %r2 -> +0x00000164(%r5)[4byte] 0x4a4ae20c f8da 500c ldr +0x0c(%r10)[4byte] -> %r5 0x4a4ae210 f8da 2008 ldr +0x08(%r10)[4byte] -> %r2 0x4a4ae214 f8da f018 ldr +0x18(%r10)[4byte] -> %pc patch_emitted_code start_pc=0x4a4ae220 pt=0xb701d000 patch_emitted_code type=3 indirected, nothing to patch Just updated indirect branch lookup shared_bb_ibl_indjmp: 0x4a4ae220 f8ca 100c str %r1 -> +0x0c(%r10)[4byte] 0x4a4ae224 f84a 0c00 str %r0 -> (%r10)[4byte] 0x4a4ae228 f8da 1014 ldr +0x14(%r10)[4byte] -> %r1 0x4a4ae22c f002 0001 and %r2 $0x00000001 -> %r0 0x4a4ae230 f100 0002 add %r0 $0x00000002 -> %r0 0x4a4ae234 f8c1 01b0 str %r0 -> +0x000001b0(%r1)[4byte] 0x4a4ae238 f022 0201 bic %r2 $0x00000001 -> %r2 0x4a4ae23c f8da 105c ldr +0x5c(%r10)[4byte] -> %r1 0x4a4ae240 ea01 0102 and %r1 %r2 $0x00 -> %r1 0x4a4ae244 f8da 0060 ldr +0x60(%r10)[4byte] -> %r0 0x4a4ae248 eb00 01c1 add %r0 %r1 lsl $0x03 -> %r1 0x4a4ae24c 6808 ldr (%r1)[4byte] -> %r0 0x4a4ae24e b160 cbz $0x4a4ae26a %r0 0x4a4ae250 eba0 0002 sub %r0 %r2 $0x00 -> %r0 0x4a4ae254 b928 cbnz $0x4a4ae262 %r0 0x4a4ae256 6848 ldr +0x04(%r1)[4byte] -> %r0 0x4a4ae258 f8da 1004 ldr +0x04(%r10)[4byte] -> %r1 0x4a4ae25c f8da 2008 ldr +0x08(%r10)[4byte] -> %r2 0x4a4ae260 4700 bx %r0 0x4a4ae262 f851 0f08 ldr +0x08(%r1)[4byte] $0x00000008 %r1 -> %r0 %r1 0x4a4ae266 f7ff bff2 b $0x4a4ae24e 0x4a4ae26a 6848 ldr +0x04(%r1)[4byte] -> %r0 0x4a4ae26c f1a0 0001 sub %r0 $0x00000001 -> %r0 0x4a4ae270 b988 cbnz $0x4a4ae296 %r0 0x4a4ae272 f8da 1060 ldr +0x60(%r10)[4byte] -> %r1 0x4a4ae276 f7ff bfe9 b $0x4a4ae24c 0x4a4ae27a f84a 0c00 str %r0 -> (%r10)[4byte] 0x4a4ae27e f8ca 100c str %r1 -> +0x0c(%r10)[4byte] 0x4a4ae282 f8da 1014 ldr +0x14(%r10)[4byte] -> %r1 0x4a4ae286 f002 0001 and %r2 $0x00000001 -> %r0 0x4a4ae28a f100 0002 add %r0 $0x00000002 -> %r0 0x4a4ae28e f8c1 01b0 str %r0 -> +0x000001b0(%r1)[4byte] 0x4a4ae292 f022 0201 bic %r2 $0x00000001 -> %r2 0x4a4ae296 f8da 100c ldr +0x0c(%r10)[4byte] -> %r1 0x4a4ae29a 4608 mov %r1 -> %r0 0x4a4ae29c f8da 1004 ldr +0x04(%r10)[4byte] -> %r1 0x4a4ae2a0 f8ca 500c str %r5 -> +0x0c(%r10)[4byte] 0x4a4ae2a4 f8da 5014 ldr +0x14(%r10)[4byte] -> %r5 0x4a4ae2a8 f8c5 2164 str %r2 -> +0x00000164(%r5)[4byte] 0x4a4ae2ac f8da 500c ldr +0x0c(%r10)[4byte] -> %r5 0x4a4ae2b0 f8da 2008 ldr +0x08(%r10)[4byte] -> %r2 0x4a4ae2b4 f8da f018 ldr +0x18(%r10)[4byte] -> %pc (Begin) Thread statistics @2927 global, 0 thread fragments (0:17.872): Protection change calls (thread): 1 Protection change pages (thread): 1 Fcache unit lookups (thread): 15 Special heap units (thread): 1 Peak special heap units (thread): 1 Special heap capacity (bytes) (thread): 4096 Peak special heap capacity (bytes) (thread): 4096 Heap headers (bytes) (thread): 32 Heap align space (bytes) (thread): 6 Peak heap align space (bytes) (thread): 6 Heap bucket pad space (bytes) (thread): 1228 Peak heap bucket pad space (bytes) (thread): 1228 Heap allocs in buckets (thread): 170 Heap allocs variable-sized (thread): 8 Total reserved memory (thread): 98304 Peak total reserved memory (thread): 98304 Guard pages, reserved virtual pages (thread): 4 Peak guard pages, reserved virtual pages (thread): 4 Stack capacity (bytes) (thread): 57344 Peak stack capacity (bytes) (thread): 57344 Heap claimed (bytes) (thread): 13100 Peak heap claimed (bytes) (thread): 13100 Heap capacity (bytes) (thread): 8192 Peak heap capacity (bytes) (thread): 8192 Heap reserved but not committed (bytes) (thread): 16384 Peak heap reserved but not committed (bytes) (thread): 20480 Total memory from OS (thread): 98304 Peak total memory from OS (thread): 98304 Our virtual memory blocks in use (thread): 6 Our peak virtual memory blocks in use (thread): 6 Allocations using multiple vmm blocks (thread): 2 Blocks used for multi-block allocs (thread): 6 Our virtual memory in use (bytes) (thread): 98304 Our peak virtual memory in use (bytes) (thread): 98304 Number of safe reads (thread): 1 Peak vmarea vector length (thread): 81 (End) Thread statistics continuation pc is 0xb6c148fc parent tid is 4450, parent sysnum is 120(clone), clone flags=0x3d0f00 sharing signal handlers with parent handler for signal 4 is 0xb6c7fa25 handler for signal 5 is 0xb6c7fa25 handler for signal 6 is 0xb6c7fa25 handler for signal 7 is 0xb6c7fa25 handler for signal 8 is 0xb6c7fa25 handler for signal 11 is 0xb6c7fa25 handler for signal 13 is 0xb6c7fa25 handler for signal 16 is 0xb6c7fa25 sharing itimers with parent thread's initial app signal mask: initial dispatch: target = 0xb6c148fc Call stack: Call stack: frame ptr 0xb68ffdb0 => parent 0xb68ffdb0, 0xb6919080 priv_mcontext_t @0x4a4787a0 r0 = 0x00000000 r1 = 0x4a5c2bf0 r2 = 0xb6919088 r3 = 0xb68ffdb0 r4 = 0xb6919088 r5 = 0xb6c18165 r6 = 0xb6919080 r7 = 0x00000078 r8 = 0xb6919088 r9 = 0xb6919088 r10 = 0xb6c18165 r11 = 0xb68ffdb0 r12 = 0xbec63860 r13 = 0xb68ffdb0 r14 = 0xb6c161d9 r15 = 0x00000000 q0 = 0x00000000 00000000 00000000 00000000 q1 = 0x00000000 00000000 00000000 00000000 q2 = 0x20302030 20302030 20302030 20302030 q3 = 0x20302030 20302030 20302030 20302030 q4 = 0x00000000 00000000 00000000 00000000 q5 = 0x00000000 00000000 00000000 00000000 q6 = 0x00000000 00000000 00000000 00000000 q7 = 0x00000000 00000000 00000000 00000000 q8 = 0x00000000 00000000 00000fff 00000000 q9 = 0x00000000 00000000 00000000 00000000 q10 = 0x00000000 00000000 00000000 00000000 q11 = 0x00000000 00000000 00000000 00000000 q12 = 0x00000000 00000000 00000000 00000000 q13 = 0x00000000 00000000 00000000 00000000 q14 = 0x00000000 00000000 00000000 00000000 q15 = 0x00000000 00000000 00000000 00000000 eflags = 0x400f0010 pc = 0x00000000 dispatch: target = 0xb6c148fc priv_mcontext_t @0x4a4787a0 r0 = 0x00000000 r1 = 0x4a5c2bf0 r2 = 0xb6919088 r3 = 0xb68ffdb0 r4 = 0xb6919088 r5 = 0xb6c18165 r6 = 0xb6919080 r7 = 0x00000078 r8 = 0xb6919088 r9 = 0xb6919088 r10 = 0xb6c18165 r11 = 0xb68ffdb0 r12 = 0xbec63860 r13 = 0xb68ffdb0 r14 = 0xb6c161d9 r15 = 0x00000000 q0 = 0x00000000 00000000 00000000 00000000 q1 = 0x00000000 00000000 00000000 00000000 q2 = 0x20302030 20302030 20302030 20302030 q3 = 0x20302030 20302030 20302030 20302030 q4 = 0x00000000 00000000 00000000 00000000 q5 = 0x00000000 00000000 00000000 00000000 q6 = 0x00000000 00000000 00000000 00000000 q7 = 0x00000000 00000000 00000000 00000000 q8 = 0x00000000 00000000 00000fff 00000000 q9 = 0x00000000 00000000 00000000 00000000 q10 = 0x00000000 00000000 00000000 00000000 q11 = 0x00000000 00000000 00000000 00000000 q12 = 0x00000000 00000000 00000000 00000000 q13 = 0x00000000 00000000 00000000 00000000 q14 = 0x00000000 00000000 00000000 00000000 q15 = 0x00000000 00000000 00000000 00000000 eflags = 0x400f0010 pc = 0x00000000 Entry into F2924(0xb6c148fc).0x4a5acdb4 (A32)(shared) fcache_enter = 0x4a4ade61, target = 0x4a5acdb4 Exit from F2924(0xb6c148fc).0x4a5acdb8 (shared) (target 0xb6c14918 not in cache) dispatch: target = 0xb6c14918 interp: start_pc = 0xb6c14918 check_thread_vm_area: pc = 0xb6c14918 prepend_entry_to_fraglist: putting fragment @0xb6c14918 (shared) on vmarea 0xb6c02000-0xb6c66d3c 0xb6c14918 e3a0e000 mov $0x00000000 -> %lr 0xb6c1491c e51d0004 ldr -0x04(%sp)[4byte] -> %r0 0xb6c14920 e51d1008 ldr -0x08(%sp)[4byte] -> %r1 0xb6c14924 ea010dbb b $0xb6c58018 interp: direct jump at 0xb6c14924 end_pc = 0xb6c14928 bb ilist before mangling: TAG 0xb6c14918 +0 L3 e3a0e000 mov $0x00000000 -> %lr +4 L3 e51d0004 ldr -0x04(%sp)[4byte] -> %r0 +8 L3 e51d1008 ldr -0x08(%sp)[4byte] -> %r1 +12 L3 ea010dbb b $0xb6c58018 END 0xb6c14918 bb ilist after mangling: TAG 0xb6c14918 +0 L3 e3a0e000 mov $0x00000000 -> %lr +4 L3 e51d0004 ldr -0x04(%sp)[4byte] -> %r0 +8 L3 e51d1008 ldr -0x08(%sp)[4byte] -> %r1 +12 L3 ea010dbb b $0xb6c58018 END 0xb6c14918 fcache_add_fragment to Basic block (shared) cache (size 32KB): F2928 w/ size 40 (=> 44) find_free_list_slot: 44 bytes added F2928 to unfilled unit @0x4a5ace98 (320 [/57344] bytes left now) exit_branch_type=0x0 target=0xb6c58018 l->flags=0x1801 Exit cti 0x4a5acea8 is targeting 0x4a5aceac + 0x0 => 0x4a5aceac vm_area_add_fragment for F2928(0xb6c14918) linking new fragment F2928(0xb6c14918) transferring incoming links from existing future frag, flags=0x01000101 hashtable_fragment_remove_helper_open_address(table=0x4a49305c, hindex=1934) Freeing future fragment 0xb6c14918 linking incoming links for F2928(0xb6c14918) linking F2924(0xb6c148fc).0x4a5acdb8 -> F2928(0xb6c14918)=0x4a5ace9c linking outgoing links for F2928(0xb6c14918) Created future fragment 0xb6c58018 w/ flags 0x01000101 hashtable_fragment_add(0xb6c58018) mask=0x000007ff offset=0 trying 0x0000061b: hashtable_fragment_add(0xb6c58018) mask=0x000007ff offset=0 trying 0x0000061c: hashtable_fragment_add(0xb6c58018) mask=0x000007ff offset=0 trying 0x0000061d: hashtable_fragment_add: added 0xb6c58018 to shared_future at table[1565] future-linking F2928(0xb6c14918).0x4a5acea8 -> (0xb6c58018) hashtable_fragment_add(0xb6c14918) mask=0x00001fff offset=0 trying 0x00001e2c: hashtable_fragment_add: added 0xb6c14918 to shared_bb at table[7724] Fragment 2928, tag 0xb6c14918, flags 0x1000030, shared, size 40: -------- prefix entry: -------- 0x4a5ace98 e59a0000 ldr (%r10)[4byte] -> %r0 -------- normal entry: -------- 0x4a5ace9c e3a0e000 mov $0x00000000 -> %lr 0x4a5acea0 e51d0004 ldr -0x04(%sp)[4byte] -> %r0 0x4a5acea4 e51d1008 ldr -0x08(%sp)[4byte] -> %r1 0x4a5acea8 eaffffff b $0x4a5aceac -------- exit stub 0: -------- type: fall-through/speculated/IAT 0x4a5aceac e58a0000 str %r0 -> (%r10)[4byte] 0x4a5aceb0 e30e058c movw $0x0000e58c -> %r0 0x4a5aceb4 e3440a56 movt $0x4a56 -> %r0[2byte] 0x4a5aceb8 e59af018 ldr +0x18(%r10)[4byte] -> %pc priv_mcontext_t @0x4a4787a0 r0 = 0x00000000 r1 = 0x4a5c2bf0 r2 = 0xb6919088 r3 = 0xb68ffdb0 r4 = 0xb6919088 r5 = 0xb6c18165 r6 = 0xb6919080 r7 = 0x00000078 r8 = 0xb6919088 r9 = 0xb6919088 r10 = 0xb6c18165 r11 = 0xb68ffdb0 r12 = 0xbec63860 r13 = 0xb68ffdb0 r14 = 0xb6c161d9 r15 = 0x4a5acdb4 q0 = 0x00000000 00000000 00000000 00000000 q1 = 0x00000000 00000000 00000000 00000000 q2 = 0x20302030 20302030 20302030 20302030 q3 = 0x20302030 20302030 20302030 20302030 q4 = 0x00000000 00000000 00000000 00000000 q5 = 0x00000000 00000000 00000000 00000000 q6 = 0x00000000 00000000 00000000 00000000 q7 = 0x00000000 00000000 00000000 00000000 q8 = 0x00000000 00000000 00000fff 00000000 q9 = 0x00000000 00000000 00000000 00000000 q10 = 0x00000000 00000000 00000000 00000000 q11 = 0x00000000 00000000 00000000 00000000 q12 = 0x00000000 00000000 00000000 00000000 q13 = 0x00000000 00000000 00000000 00000000 q14 = 0x00000000 00000000 00000000 00000000 q15 = 0x00000000 00000000 00000000 00000000 eflags = 0x400f0010 pc = 0x4a5acdb4 Entry into F2928(0xb6c14918).0x4a5ace9c (A32)(shared) fcache_enter = 0x4a4ade61, target = 0x4a5ace9c Exit from F2928(0xb6c14918).0x4a5acea8 (shared) (target 0xb6c58018 not in cache) dispatch: target = 0xb6c58018 interp: start_pc = 0xb6c58018 check_thread_vm_area: pc = 0xb6c58018 prepend_entry_to_fraglist: putting fragment @0xb6c58018 (shared) on vmarea 0xb6c02000-0xb6c66d3c 0xb6c58018 e59fc004 ldr +0x04(%pc)[4byte] -> %r12 0xb6c5801c e08fc00c add %pc %r12 $0x00 -> %r12 0xb6c58020 e12fff1c bx %r12 mbr exit target = 0x4a4ae220 end_pc = 0xb6c58024 exit_branch_type=0x12 bb->exit_target=0x4a4ae220 bb ilist before mangling: TAG 0xb6c58018 +0 L3 e59fc004 ldr +0x04(%pc)[4byte] -> %r12 +4 L3 e08fc00c add %pc %r12 $0x00 -> %r12 +8 L3 e12fff1c bx %r12 +12 L4 @0x4a5ce0f0 eafbad71 b $0x4a4ae220 END 0xb6c58018 use last scratch reg r0 bb ilist after mangling: TAG 0xb6c58018 +0 m4 @0x4a5ce230 4a4787a0