---------------- IN: 0x00010434: e92d4800 push {fp, lr} 0x00010438: e28db004 add fp, sp, #4 ; 0x4 0x0001043c: e59f000c ldr r0, [pc, #12] ; 0x10450 0x00010440: ebffffa5 bl 0x102dc OP: ld_i32 tmp5,env,$0xffffffffffffffec movi_i32 tmp6,$0x0 brcond_i32 tmp5,tmp6,ne,$L0 ---- 00010434 00000000 00000000 mov_i32 tmp5,r13 movi_i32 tmp6,$0xfffffffffffffff8 add_i32 tmp5,tmp5,tmp6 mov_i32 tmp6,r11 mov_i32 tmp7,tmp5 qemu_st_i32 tmp6,tmp7,leul,0 movi_i32 tmp6,$0x4 add_i32 tmp5,tmp5,tmp6 mov_i32 tmp6,r14 mov_i32 tmp7,tmp5 qemu_st_i32 tmp6,tmp7,leul,0 movi_i32 tmp6,$0xfffffffffffffffc add_i32 tmp5,tmp5,tmp6 mov_i32 r13,tmp5 ---- 00010438 00000000 00000000 movi_i32 tmp5,$0x4 mov_i32 tmp6,r13 add_i32 tmp6,tmp6,tmp5 mov_i32 r11,tmp6 ---- 0001043c 00000000 00000e00 movi_i32 tmp5,$0x10444 movi_i32 tmp6,$0xc add_i32 tmp5,tmp5,tmp6 mov_i32 tmp7,tmp5 qemu_ld_i32 tmp6,tmp7,leul,0 mov_i32 r0,tmp6 ---- 00010440 00000000 00000000 movi_i32 tmp5,$0x10444 mov_i32 r14,tmp5 movi_i32 pc,$0x102dc exit_tb $0x0 set_label $L0 exit_tb $0x7fb3bf13acd3 OUT (LLVM IR): define private i64 @tcg-llvm-tb-14510-10434(%struct.CPUARMState*) { entry: %1 = ptrtoint %struct.CPUARMState* %0 to i64, !host !0 %rrgic = load volatile i64* inttoptr (i64 93997042484776 to i64*), !host !1 %2 = add i64 %1, -20 %3 = inttoptr i64 %2 to i32* %tmp5_v = load i32* %3 %4 = icmp ne i32 %tmp5_v, 0 br i1 %4, label %11, label %5 ;