Box86 - Linux Userspace x86 Emulator


Sorry I hadn't refreshed the page yet so I didn't see your latest message; I've installed gdb dashboard and will have a look at that shortly.

I did some C and C++ stuff back in the day (pre-2000) but not at your level (not even close). I'm trying to pick it up again though - but in recent years I've mainly done my work in Go (with a smidgen of Cgo) and Bash. More recently I've started to experiment with Rust, but I'm very much out of touch with C and C++ (not that I was all that proficient in them to begin with) - so my gdb skill is a tad limited. That said - this endeavour has really stimulated me to get back on the C/C++ horse and help out with your efforts. I'll need a little time though to clear up some misty areas in my perception and understanding.

As far as running the tests in the box86 folder go - I must shamefully admit that I had completely ignored them.. sorry. A preliminary non-gdb run-through of them goes something like:

/usr/local/bin/box86 ./benchfloat
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./benchfloat
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf75f9008, 0xf7c79820) => 0x44cdb00 (0x55 / 0x57)
GetDynablocksFromAddress(0xf75f9008, 0xf7c784cc) => 0x44cda90 (0x53 / 0x83)
Illegal instruction

/usr/local/bin/box86 ./test01
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test01
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf73f4008, 0x80484c0) => 0x3b117c0 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test02
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test02
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf73a1008, 0xf7a215f0) => 0x4547828 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test03
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test03
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf725e008, 0xf78de560) => 0x46097a0 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test04
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test04
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf723d008, 0xf78bd580) => 0x45709b0 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test05
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test05
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf7402008, 0xf7a828c0) => 0x49848e0 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test06
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test06
Using native(wrapped) libpthread.so.0
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf7299008, 0x80487b0) => 0x2ec2a38 (0x55 / 0x57)
5189|SIGSEGV @0x288da10 (???) (x86pc=0xffffffff/"???"), for accessing 0x10093e28 (code=1), db=(nil)((nil)/???)
Segmentation fault

/usr/local/bin/box86 ./test07
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test07
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf77ff008, 0xf7e7f5a0) => 0x40867d0 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test07
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test07
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf772c008, 0xf7dac5a0) => 0x2c527d0 (0x55 / 0x57)
5191|SIGSEGV @0x2843fc8 (???) (x86pc=0xffffffff/"???"), for accessing 0x2 (code=1), db=(nil)((nil)/???)
Segmentation fault

/usr/local/bin/box86 ./test08
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test08
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf736a008, 0xf79ea6f0) => 0x3f44868 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test09
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test09
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf718f008, 0xf780f620) => 0x2e08858 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test10
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test10
Using emulated /lib/i386-linux-gnu/libstdc++.so.6
Using native(wrapped) libm.so.6
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
Using emulated /lib/i386-linux-gnu/libgcc_s.so.1
GetDynablocksFromAddress(0xf74b6008, 0xf6ad1dd4) => 0x46b2c60 (0x53 / 0x83)
GetDynablocksFromAddress(0xf74b6008, 0xf6ad20a8) => 0x46b2cd0 (0xff / 0xa3)
Illegal instruction

/usr/local/bin/box86 ./test11
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test11
Using native(wrapped) libpthread.so.0
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf788a008, 0xf7f09ae0) => 0x3b1ab28 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test12
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test12
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf72ed008, 0xf796d6d0) => 0x2c468b0 (0x55 / 0x57)
5197|SIGSEGV @0xf66ec060 (???) (x86pc=0xf796d6d0/"./test12/__libc_csu_init"), for accessing 0xf932f6b0 (code=1), db=0x2c52810(0xf796d6d0/./test12/__libc_csu_init)
Segmentation fault

/usr/local/bin/box86 ./test13
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test13
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) libpthread.so.0
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf76e9008, 0xf7d69930) => 0x3afe9a8 (0x55 / 0x57)
Illegal instruction

/usr/local/bin/box86 ./test14
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test14
Using native(wrapped) libpthread.so.0
Using native(wrapped) libc.so.6
Using native(wrapped) ld-linux.so.2
Using native(wrapped) librt.so.1
GetDynablocksFromAddress(0xf7815008, 0xf7e94d50) => 0x3ab1020 (0x55 / 0x57)
Illegal instruction

I'm more than willing to run through them all with all the logging and debugging options turned on under the watchful eye of gdb (with enhancements suggested by you) - but I'll need a few hours of recharging time before I can deliver on that as its late night - early morning where I am right now.

I'll get right on it a few hours from now though (as well as running the actual Mesa 20.2 tests that I promised to report back on).
 
Thank you for understanding - I cannot emphasize enough how much I appreciate all this, truly.
I shall return with as much useful info as I can muster after a few hours of recharging :)
 
Top of the morning / afternoon :)

I started today a little selfishly and gave the new Mesa 20.2 a go - now that I have compiled and upgraded it on the host, all systemd-nspawn containers as well as the chroot. Things have indeed improved dramatically - I didn't do a whole lot of testing - but I can start Unreal and Deus Ex in safe mode (OpenGL segfaulted but that may just be a configuration issue, I didn't really look into that yet with any tracing as I felt I should focus on the primary issue at hand first). To my amazement though - even in safe mode both Unreal and Deus Ex are actually playable. Pure software rendering and the performance was buttery smooth. Amazing...

On a side note - I also found out why System Shock 2 wouldn't run.. turns out it's a true Windows game and DirectX all the way. DX 6 originally, but with enhancements by the community brought up to DX 9 - so that one will have to wait. On the bright side, the publisher has kind of promised to do an open source System Shock 2 Enhanced Edition like they did with System Shock 1 - so there will no doubt be a Shockolate 2 community project around that time which will allow System Shock 2 to run natively on ARM Linux. (Shockolate 1 works very well already).

But I digress - sorry about that.

Back to the task at hand:

All tests today will be performed as: 'BOX86_JITGDB=1 BOX86_DYNAREC_LOG=2 BOX86_LOG=2 BOX86_DYNAREC_DUMP=2 gdb -q /usr/local/bin/box86' unless instructed otherwise.

On a container with the following capabilities for testing purposes:

CAP_NET_ADMIN (Have this enabled for desktop integration, not testing)

Added the following capabilities to expand permissions to the maximum level (except for CAP_SYS_ADMIN which was also active during most earlier tests).

CAP_SYS_ADMIN
CAP_SYS_CHROOT
CAP_SYS_MODULE
CAP_SYS_RAWIO
CAP_MKNOD
CAP_SYS_NICE
CAP_SYS_TTY_CONFIG
CAP_IPC_LOCK
CAP_SYS_PTRACE
CAP_SYS_PACCT

Basic World Of Goo trace (last one, I'll focus on the tests in the source folder from now on; this was just to test the gdb enhancements (much prettier indeed))

─── Output/messages─────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:4300AD4B
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./WorldOfGoo.bin.x86
Read 32 Section header
Read 9 Program header
Loading Sections Table String (idx = 29)
Loading SymTab Strings (idx = 31)
Loading SymTab (idx = 30)
Loading Dynamic (idx = 23)
Rel Table @0x80ac79c (0x80/0x8)
PLT Table @0x80ac81c (type=17 0x700/0x8)
The GOT.PLT Table is at address 0x82fe000
The GOT Table is at address 0x82fdffc
The .init is at address 0x80acf1c
The .init_array is at address 0x82fddb8, and have 73 elements
The .fini is at address 0x829e2e4
The .fini_array is at address 0x82fdedc, and have 1 elements
The .text is at address 0x80add60, and is 2033028 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./WorldOfGoo.bin.x86" as #0 in elf collection
Elf Addr(v/p)=0x8048000/0x8048000 Memsize=0x2bdfc8 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x2be000 memory @0x8048000 for Elf "./WorldOfGoo.bin.x86"
Loading block #2 @0x8048000 (0x2b4a87/0x2b4a87)
Add ELF eXecutable Memory 0x8048000:0x2b4a87
addDBFromAddressRange 0x8048000 -> 0x82fca86
Loading block #3 @0x82fddb8 (0xc6c/0x8210)
Calc stack size, based on 1 elf(s)
Stack is @0xf70ef020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf70ef020/0x800000
Setup X86 Emu
Prepending path "/mnt/crypt1/games/BOX86/LINUX/WorldOfGoo/lib" to BOX86_LD_LIBRARY_PATH
Trying to add "libSDL2-2.0.so.0" to maplib
Trying to load "libSDL2-2.0.so.0"
Simplified name is "libSDL2-2.0.so.0"
Using native(wrapped) libSDL2-2.0.so.0
Trying to add "libdl.so.2" to maplib
Trying to load "libdl.so.2"
Simplified name is "libdl.so.2"
Using native(wrapped) libdl.so.2
Created lib and added to maplib => success
Trying to add "libm.so.6" to maplib
Trying to load "libm.so.6"
Simplified name is "libm.so.6"
Using native(wrapped) libm.so.6
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Created lib and added to maplib => success
Trying to add "libSDL2_mixer-2.0.so.0" to maplib
Trying to load "libSDL2_mixer-2.0.so.0"
Simplified name is "libSDL2_mixer-2.0.so.0"
Using native(wrapped) libSDL2_mixer-2.0.so.0
Created lib and added to maplib => success
Trying to add "libstdc++.so.6" to maplib
Trying to load "libstdc++.so.6"
Simplified name is "libstdc++.so.6"
Read 32 Section header
Read 8 Program header
Loading Sections Table String (idx = 31)
Loading SymTab Strings (idx = 0)
Loading SymTab (idx = 0)
Loading Dynamic (idx = 24)
Rel Table @0x61ae0 (0x7990/0x8)
PLT Table @0x69470 (type=17 0x1a10/0x8)
The GOT.PLT Table is at address 0x182000
The GOT Table is at address 0x181754
The .init is at address 0x6ae80
The .init_array is at address 0x17ceb0, and have 11 elements
The .fini is at address 0x12bcf4
The .fini_array is at address 0x17cedc, and have 1 elements
The .text is at address 0x6e3a0, and is 776532 big
Loading DynSym Strings (idx = 4)
Loading DynSym (idx = 3)
Adding "/lib/i386-linux-gnu/libstdc++.so.6" as #1 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x185038 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=16 (align=4)
Allocating 0x185038 memory @(nil) for Elf "/lib/i386-linux-gnu/libstdc++.so.6"
Got 0xf5cfd000 (delta=0xf5cfd000)
Loading block #0 @0xf5cfd000 (0x17b8e4/0x17b8e4)
Add ELF eXecutable Memory 0xf5cfd000:0x17b8e4
addDBFromAddressRange 0xf5cfd000 -> 0xf5e788e3
Loading block #1 @0xf5e79eb0 (0x5f3c/0x8188)
Loading TLS block #4 @0x2c4a088 (0x0/0x10)
Using emulated /lib/i386-linux-gnu/libstdc++.so.6
Trying to add "libm.so.6" to maplib
Already present in maplib => success
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Already present in maplib => success
Trying to add "librt.so.1" to maplib
Already present in maplib => success
Created lib and added to maplib => success
Trying to add "ld-linux.so.2" to maplib
Already present in maplib => success
Trying to add "libgcc_s.so.1" to maplib
Trying to load "libgcc_s.so.1"
Simplified name is "libgcc_s.so.1"
Read 27 Section header
Read 7 Program header
Loading Sections Table String (idx = 26)
Loading SymTab Strings (idx = 0)
Loading SymTab (idx = 0)
Loading Dynamic (idx = 20)
Rel Table @0x1c3c (0x50/0x8)
PLT Table @0x1c8c (type=17 0x148/0x8)
The GOT.PLT Table is at address 0x1d000
The GOT Table is at address 0x1cfe8
The .init is at address 0x1dd4
The .init_array is at address 0x1cee4, and have 2 elements
The .fini is at address 0x17798
The .fini_array is at address 0x1ceec, and have 1 elements
The .text is at address 0x20b0, and is 87781 big
Loading DynSym Strings (idx = 4)
Loading DynSym (idx = 3)
Adding "/lib/i386-linux-gnu/libgcc_s.so.1" as #2 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x1d238 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x1d238 memory @(nil) for Elf "/lib/i386-linux-gnu/libgcc_s.so.1"
Got 0xf5cdf000 (delta=0xf5cdf000)
Loading block #0 @0xf5cdf000 (0x1b64c/0x1b64c)
Add ELF eXecutable Memory 0xf5cdf000:0x1b64c
addDBFromAddressRange 0xf5cdf000 -> 0xf5cfa64b
Loading block #1 @0xf5cfbee4 (0x1dc/0x354)
Using emulated /lib/i386-linux-gnu/libgcc_s.so.1
Trying to add "libc.so.6" to maplib
Already present in maplib => success
Applying 10 Relocation(s) for /lib/i386-linux-gnu/libgcc_s.so.1
PLT Resolver injected in plt.got at 0xf5cfc008
Applying 41 PLT Relocation(s) for /lib/i386-linux-gnu/libgcc_s.so.1
Created lib and added to maplib => success
Applying 3890 Relocation(s) for /lib/i386-linux-gnu/libstdc++.so.6
PLT Resolver injected in plt.got at 0xf5e7f008
Applying 834 PLT Relocation(s) for /lib/i386-linux-gnu/libstdc++.so.6
Created lib and added to maplib => success
Trying to add "libm.so.6" to maplib
Already present in maplib => success
Trying to add "libgcc_s.so.1" to maplib
Already present in maplib => success
Trying to add "libc.so.6" to maplib
Already present in maplib => success
And now export symbols / relocation for ./WorldOfGoo.bin.x86...
Applying 16 Relocation(s) for ./WorldOfGoo.bin.x86
PLT Resolver injected in plt.got at 0x82fe008
Applying 224 PLT Relocation(s) for ./WorldOfGoo.bin.x86
Calling Init for /lib/i386-linux-gnu/libgcc_s.so.1 @0xf5ce0dd4
GetDynablocksFromAddress(0xf7968008, 0xf5ce0dd4) => 0x2c78d18 (0x53 / 0x83)
Ask for DynaRec Block Alloc #1
Emitting 316 bytes for 35 x86 bytes ( => /lib/i386-linux-gnu/libgcc_s.so.1/ + 7636)
0xf5ce0dd4: 53 PUSH reg
0xf58df000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf5ce0dd5: 83 EC 08 SUB Ed, Ib
0xf58df004: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf5ce0dd8: E8 83 09 00 00 CALL Id
0xf58df008: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e3007ddd MOVW r7, #0xddd
e34f75ce MOVT r7, #0xf5ce
0xf5ce0ddd: 81 C3 23 B2 01 00 ADD Ed, Id
0xf58df010: 3 emited opcodes, state=1/1, set=3F, use=0, need=0
e30b3223 MOVW r3, #0xb223
e3403001 MOVT r3, #0x1
e0877003 ADD r7, r7, r3
0xf5ce0de3: 8B 83 F8 FF FF FF MOV Gd, Ed
0xf58df01c: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5174008 LDR r4, [r7, #-8]
0xf5ce0de9: 85 C0 TEST Ed, Gd
0xf58df020: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf5ce0deb: 74 05 JZ ib
0xf58df034: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf5ce0ded: E8 B6 02 00 00 CALL Id (=> /lib/i386-linux-gnu/libgcc_s.so.1/ + 8360)
0xf58df040: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf5ce0df2/0xf58df090-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3002df2 MOVW r2, #0xdf2
e34f25ce MOVT r2, #0xf5ce
e30f3090 MOVW r3, #0xf090
e34f358d MOVT r3, #0xf58d
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e301c0a8 MOVW r12, #0x10a8
e34fc5ce MOVT r12, #0xf5ce
e3091160 MOVW r1, #0x9160
e34012ce MOVT r1, #0x2ce
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf5ce0df2: 83 C4 08 ADD Ed, Ib
0xf58df090: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf5ce0df5: 5B POP reg
0xf58df0fc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf5ce0df6: C3 RET
0xf58df100: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf5ce0dd4:0xf5ce0df7 (0xf58df000, 0x13c bytes, with 2 son(s))
Calling DynaRec Block @0xf5ce0dd4 (0xf58df000) of 11 x86 instructions (nolinker=0, father=(nil)) emu=0x2bb36f0
GetDynablocksFromAddress(0xf7968008, 0xf5ce10a8) => 0x2c78d88 (0xff / 0xa3)
Emitting 56 bytes for 6 x86 bytes ( => /lib/i386-linux-gnu/libgcc_s.so.1/ + 8360)
0xf5ce10a8: FF A3 F8 FF FF FF JMP Ed
0xf58df200: 14 emited opcodes, state=0/0, set=0, use=0, need=0
e517c008 LDR r12, [r7, #-8]
Jump to linker (#0) nolinker=0
e3081f90 MOVW r1, #0x8f90
e34012ce MOVT r1, #0x2ce
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0xf5ce10a8:0xf5ce10ae (0xf58df200, 0x38 bytes, with 0 son(s))

Program received signal SIGILL, Illegal instruction.
0xf5cdf000 in ?? ()
─── Assembly ────────────────────────────── ──────────────────────────────────────────────────────────────────────────────────────────────────────
0xf5cdf000 ? ; <UNDEFINED> instruction: 0x464c457f
0xf5cdf004 ? andeq r0, r1, r1, lsl #2
0xf5cdf008 ? andeq r0, r0, r0
0xf5cdf00c ? andeq r0, r0, r0
0xf5cdf010 ? andeq r0, r3, r3
0xf5cdf014 ? andeq r0, r0, r1
0xf5cdf018 ? strheq r2, [r0], -r0
0xf5cdf01c ? andeq r0, r0, r4, lsr r0
0xf5cdf020 ? andeq r12, r1, r8, ror #3
0xf5cdf024 ? andeq r0, r0, r0
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02bb36f0 r1 0x02ce8f90 r2 0x029078a0 r3 0x02c4b6b4 r4 0x02c4b6b4 r5 0x00000000 r6 0x00000000 r7 0xf5cfc000 r8 0xf78ee38c r9 0x00000000 r10 0x00000000
r11 0x00000000 r12 0x02c4b6b4 sp 0xfffef09c lr 0x02893a30 pc 0xf5cdf000 cpsr 0x20000010 fpscr 0x80000010
─── Source ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf5cdf000
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02bb14e0
─── Threads ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 96 name box86 from 0xf5cdf000
─── Variables ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> x/10i $pc-32
0xf5cdefe0: andeq r0, r0, r0
0xf5cdefe4: andeq r0, r0, r0
0xf5cdefe8: andeq r0, r0, r0
0xf5cdefec: andeq r0, r0, r0
0xf5cdeff0: andeq r0, r0, r0
0xf5cdeff4: andeq r0, r0, r0
0xf5cdeff8: andeq r0, r0, r0
0xf5cdeffc: andeq r0, r0, r0
=> 0xf5cdf000: ; <UNDEFINED> instruction: 0x464c457f
0xf5cdf004: andeq r0, r1, r1, lsl #2
>>> backtrace full
#0 0xf5cdf000 in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4124033024, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4124033024) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2cec5d8
block = 0x2c4b6b4
father = <optimized out>
#3 0x02bb14e0 in ?? ()
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>>

I shall now do traces on all of the tests in the source folder - after which I shall look into the details you mentioned yesterday in your fore last message and go through the source more thoroughly (as far as I am able to understand it).
 
Benchfloat + first 7 tests

─── Output/messages ───────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:012D0045
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./benchfloat
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x43c (0x40/0x8)
PLT Table @0x47c (type=17 0x50/0x8)
The GOT Table is at address 0x2fb8
The .init is at address 0x4cc
The .init_array is at address 0x2eb8, and have 1 elements
The .fini is at address 0x18a4
The .fini_array is at address 0x2ebc, and have 1 elements
The .text is at address 0x5b0, and is 4852 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./benchfloat" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x3010 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x3010 memory @(nil) for Elf "./benchfloat"
Got 0xf7fe9000 (delta=0xf7fe9000)
Loading block #2 @0xf7fe9000 (0x1c98/0x1c98)
Add ELF eXecutable Memory 0xf7fe9000:0x1c98
addDBFromAddressRange 0xf7fe9000 -> 0xf7feac97
Loading block #3 @0xf7febeb8 (0x150/0x158)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./benchfloat...
Applying 8 Relocation(s) for ./benchfloat
PLT Resolver injected in plt.got at 0xf7febfc0
Applying 10 PLT Relocation(s) for ./benchfloat
Entry Point is 0xf7fea4c9
Start x86emu on Main
Run X86 (0x2bb36e0), EIP=0xf7fea4c9, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e8, Slot=40 Return=0xf7fea4fa: elf is ./benchfloat
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfd8 with sym=__libc_start_main (0xf7fe9556 -> 0x2bb7c6d / (noelf))
return 0xF7FEA820
0177|0xf7fea4fa: Calling __libc_start_main (F7FE95B0, 00000001, F79663C0...) =>Calling init(0xf7fea820) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea820) => 0x2bb6b28 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./benchfloat/__libc_csu_init)
0xf7fea820: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea821: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea822: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea823: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea824: E8 D7 FC FF FF CALL Id (=> ./benchfloat/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7829 MOVW r7, #0xa829
e34f77fe MOVT r7, #0xf7fe
0xf7fea829: 81 C3 8F 17 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e301378f MOVW r3, #0x178f
e0877003 ADD r7, r7, r3
0xf7fea82f: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea832: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea836: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea83c: E8 8B EC FF FF CALL Id (=> ./benchfloat/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea841/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a2841 MOVW r2, #0xa841
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e309c4cc MOVW r12, #0x94cc
e34fc7fe MOVT r12, #0xf7fe
e30217b0 MOVW r1, #0x27b0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea841: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea847: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea849: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea84c: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea84e: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea850: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea852: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea858: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea85b: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea85c: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea860: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea864: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea86b/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a286b MOVW r2, #0xa86b
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30217c0 MOVW r1, #0x27c0
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea86b: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea86e: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea871: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea873: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea875: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea878: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea879: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea87a: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea87b: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea87c: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea820:0xf7fea87d (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea820 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36e0
GetDynablocksFromAddress(0xf7968008, 0xf7fe94cc) => 0x2bb6ab8 (0x53 / 0x83)
Emitting 312 bytes for 35 x86 bytes ( => ./benchfloat/)
0xf7fe94cc: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fe94cd: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fe94d0: E8 2B 10 00 00 CALL Id (=> ./benchfloat/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30974d5 MOVW r7, #0x94d5
e34f77fe MOVT r7, #0xf7fe
0xf7fe94d5: 81 C3 E3 2A 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3023ae3 MOVW r3, #0x2ae3
e0877003 ADD r7, r7, r3
0xf7fe94db: 8B 83 3C 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e597403c LDR r4, [r7, #60]
0xf7fe94e1: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fe94e3: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fe94e5: E8 BE 00 00 00 CALL Id (=> ./benchfloat/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fe94ea/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30924ea MOVW r2, #0x94ea
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e309c5a8 MOVW r12, #0x95a8
e34fc7fe MOVT r12, #0xf7fe
e3021758 MOVW r1, #0x2758
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fe94ea: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fe94ed: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fe94ee: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fe94cc:0xf7fe94ef (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGSEGV, Segmentation fault.
0x02843fc8 in GetDynablocksFromAddress (context=0xf7968008, addr=addr@entry=0) at /mnt/crypt1/projects/builds/box86/src/elfs/elfloader.c:979
979 dynablocklist_t* ret = getDBFromAddress(addr);
─── Assembly ──────────────────────────────────────────────────────────────────────────────────
0x02843fb4 GetDynablocksFromAddress+12 mov r6, r0
0x02843fb8 GetDynablocksFromAddress+16 mov r0, r1
0x02843fbc GetDynablocksFromAddress+20 str lr, [sp, #12]
0x02843fc0 GetDynablocksFromAddress+24 sub sp, sp, #8
0x02843fc4 GetDynablocksFromAddress+28 bl 0x2812358 <getDBFromAddress>
0x02843fc8 GetDynablocksFromAddress+32 ldrb lr, [r4, #1]
0x02843fcc GetDynablocksFromAddress+36 mov r5, r0
0x02843fd0 GetDynablocksFromAddress+40 mov r3, r0
0x02843fd4 GetDynablocksFromAddress+44 mov r2, r4
0x02843fd8 GetDynablocksFromAddress+48 mov r1, r6
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────
r0 0x00000000 r1 0x00000000 r2 0x02bab5a0 r3 0xf7968008 r4 0x00000000
r5 0xfffeee6c r6 0xf7968008 r7 0x00000000 r8 0x00000001 r9 0x02afa948
r10 0x00000000 r11 0x02881694 r12 0x00000000 sp 0xfffeedd0 lr 0x02843fc8
pc 0x02843fc8 cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────
974
975 #ifdef DYNAREC
976 dynablocklist_t* GetDynablocksFromAddress(box86context_t *context, uintptr_t addr)
977 {
978 // this is one is fast, so start with that
979 dynablocklist_t* ret = getDBFromAddress(addr);
980 printf("GetDynablocksFromAddress(%p, %p) => %p (0x%02x / 0x%02x)\n", context, (void*)addr, ret, (*(uint8_t*)addr), (*(uint8_t*)(addr+1)));
981 if(ret) {
982 return ret;
983 }
─── Stack ─────────────────────────────────────────────────────────────────────────────────────
[0] from 0x02843fc8 in GetDynablocksFromAddress+32 at /mnt/crypt1/projects/builds/box86/src/elfs/elfloader.c:979
[1] from 0x02906448 in internalDBGetBlock+64 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:608
[2] from 0x02906634 in DBGetBlock+52 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:637
[3] from 0x02893db4 in DynaRun+244 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:162
[4] from 0x02881728 in my___libc_start_main+148 at /mnt/crypt1/projects/builds/box86/src/emu/x86run_private.c:42
[5] from 0x028a45b0 in iFEpippppp+64 at /mnt/crypt1/projects/builds/box86/src/wrapped/generated/wrapper.c:2970
[6] from 0x028866ec in x86Int3+884 at /mnt/crypt1/projects/builds/box86/src/emu/x86int3.c:222
[7] from 0x02851f88 in Run+10992 at /mnt/crypt1/projects/builds/box86/src/emu/x86run.c:929
[8] from 0x0281010c in main+2284 at /mnt/crypt1/projects/builds/box86/src/main.c:993
─── Threads ───────────────────────────────────────────────────────────────────────────────────
[1] id 177 name box86 from 0x02843fc8 in GetDynablocksFromAddress+32 at /mnt/crypt1/projects/builds/box86/src/elfs/elfloader.c:979
─── Variables ─────────────────────────────────────────────────────────────────────────────────
arg context = 0xf7968008: value of type `box86context_t' requires 4195692 bytes, which is more tha…, addr = 0
loc ret = <optimized out>
───────────────────────────────────────────────────────────────────────────────────────────────
>>> x/10i $pc-32
0x2843fa8 <GetDynablocksFromAddress>: strd r4, [sp, #-16]!
0x2843fac <GetDynablocksFromAddress+4>: mov r4, r1
0x2843fb0 <GetDynablocksFromAddress+8>: str r6, [sp, #8]
0x2843fb4 <GetDynablocksFromAddress+12>: mov r6, r0
0x2843fb8 <GetDynablocksFromAddress+16>: mov r0, r1
0x2843fbc <GetDynablocksFromAddress+20>: str lr, [sp, #12]
0x2843fc0 <GetDynablocksFromAddress+24>: sub sp, sp, #8
0x2843fc4 <GetDynablocksFromAddress+28>: bl 0x2812358 <getDBFromAddress>
=> 0x2843fc8 <GetDynablocksFromAddress+32>: ldrb lr, [r4, #1]
0x2843fcc <GetDynablocksFromAddress+36>: mov r5, r0
>>> backtrace full
#0 0x02843fc8 in GetDynablocksFromAddress (context=0xf7968008, addr=addr@entry=0) at /mnt/crypt1/projects/builds/box86/src/elfs/elfloader.c:979
ret = <optimized out>
#1 0x02906448 in internalDBGetBlock (addr=addr@entry=0, create=create@entry=1, current=<optimized out>, emu=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:608
dynablocks = <optimized out>
block = 0x0
created = -153718016
#2 0x02906634 in DBGetBlock (emu=emu@entry=0x2bb36e0, addr=0, create=create@entry=1, current=0xfffeee6c, current@entry=0xfffeee64) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:637
db = <optimized out>
#3 0x02893db4 in DynaRun (emu=emu@entry=0x2bb36e0) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:162
block = <optimized out>
current = 0x2bc2de0
#4 0x02881728 in my___libc_start_main (emu=emu@entry=0x2bb36e0, main=0xf7fe95b0, argc=<optimized out>, ubp_av=<optimized out>, init=0xf7fea820, fini=0xf7fea880, rtld_fini=0x0, stack_end=0xf79663bc) at /mnt/crypt1/projects/builds/box86/src/emu/x86run_private.c:42
No locals.
#5 0x028a45b0 in iFEpippppp (emu=0x2bb36e0, fcn=42473108) at /mnt/crypt1/projects/builds/box86/src/wrapped/generated/wrapper.c:2970
fn = 0x2881694 <my___libc_start_main>
#6 0x028866ec in x86Int3 (emu=0x2bb36e0) at /mnt/crypt1/projects/builds/box86/src/emu/x86int3.c:222
tid = -1538262528
buff2 = '\000' <repeats 63 times>
tmp = <optimized out>
post = 0
pu32 = 0xb1
s = 0x2bb586c "__libc_start_main"
buff = "0177|0xf7fea4fa: Calling __libc_start_main (F7FE95B0, 00000001, F79663C0...)", '\000' <repeats 179 times>
buff3 = '\000' <repeats 63 times>
perr = 0
w = 0x28a4570 <iFEpippppp>
addr = 42473108
#7 0x02851f88 in Run (emu=0x2bb36e0, step=step@entry=0) at /mnt/crypt1/projects/builds/box86/src/emu/x86run.c:929
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8u2 = <optimized out>
tmp8s = <optimized out>
tmp16u = <optimized out>
tmp16u2 = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32u2 = <optimized out>
tmp32u3 = <optimized out>
tmp32s = -112
tmp32s2 = <optimized out>
tmp64u = <optimized out>
tmp64s = -576812870856390936
ip = <optimized out>
d = 1.2606349607074363e-296
f = -9.54209877e+33
ll = <optimized out>
opex = <optimized out>
eax1 = {
q = {[0] = 193304683877195152, [1] = 1},
sq = {[0] = 193304683877195152, [1] = 1},
d = {[0] = 9.4056079200712884e-296, [1] = 4.9406564584124654e-324},
f = {[0] = -9.54755808e+33, [1] = 2.56781128e-37, [2] = 1.40129846e-45, [3] = 0},
ud = {[0] = 4159397264, [1] = 45007253, [2] = 1, [3] = 0},
sd = {[0] = -135570032, [1] = 45007253, [2] = 1, [3] = 0},
uw = {[0] = 23952, [1] = 63467, [2] = 49557, [3] = 686, [4] = 1, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 23952, [1] = -2069, [2] = -15979, [3] = 686, [4] = 1, [5] = 0, [6] = 0, [7] = 0},
ub = "\220]\353\367\225\301\256\002\001\000\000\000\000\000\000",
sb = "\220]\353\367\225\301\256\002\001\000\000\000\000\000\000"
}
opem = <optimized out>
eam1 = {
q = 94353701660,
sq = 94353701660,
ud = {[0] = 4159388444, [1] = 21},
sd = {[0] = -135578852, [1] = 21},
uw = {[0] = 15132, [1] = 63467, [2] = 21, [3] = 0},
sw = {[0] = 15132, [1] = -2069, [2] = 21, [3] = 0},
ub = "\034;\353\367\025\000\000",
sb = "\034;\353\367\025\000\000"
}
baseopcodes = {[0] = 0x2856388 <Run+28400>, [1] = 0x285ba6c <Run+50644>, [2] = 0x2856404 <Run+28524>, [3] = 0x285b9f0 <Run+50520>, [4] = 0x285b9b4 <Run+50460>, [5] = 0x285b978 <Run+50400>, [6] = 0x285725c <Run+32196>, [7] = 0x2857228 <Run+32144>, [8] = 0x285b904 <Run+50284>, [9] = 0x285bc04 <Run+51052>, [10] = 0x285bb90 <Run+50936>, [11] = 0x285bb1c <Run+50820>, [12] = 0x285bae8 <Run+50768>, [13] = 0x285a6b8 <Run+45600>, [14] = 0x28571fc <Run+32100>, [15] = 0x2857324 <Run+32396>, [16] = 0x285a64c <Run+45492>, [17] = 0x285a5e0 <Run+45384>, [18] = 0x285a574 <Run+45276>, [19] = 0x285bec4 <Run+51756>, [20] = 0x285be98 <Run+51712>, [21] = 0x285be6c <Run+51668>, [22] = 0x2852164 <Run+11468>, [23] = 0x2852130 <Run+11416>, [24] = 0x285be00 <Run+51560>, [25] = 0x285c078 <Run+52192>, [26] = 0x285c00c <Run+52084>, [27] = 0x285c0e4 <Run+52300>, [28] = 0x285b8d8 <Run+50240>, [29] = 0x285bdd4 <Run+51516>, [30] = 0x2852104 <Run+11372>, [31] = 0x28520d0 <Run+11320>, [32] = 0x285bd60 <Run+51400>, [33] = 0x285bcec <Run+51284>, [34] = 0x285bc78 <Run+51168>, [35] = 0x285bf64 <Run+51916>, [36] = 0x285bf30 <Run+51864>, [37] = 0x285bfd8 <Run+52032>, [38] = 0x28520b8 <Run+11296>, [39] = 0x2852090 <Run+11256>, [40] = 0x285a358 <Run+44736>, [41] = 0x2857470 <Run+32728>, [42] = 0x28573f4 <Run+32604>, [43] = 0x2857378 <Run+32480>, [44] = 0x285733c <Run+32420>, [45] = 0x2856ef4 <Run+31324>, [46] = 0x2852078 <Run+11232>, [47] = 0x2852050 <Run+11192>, [48] = 0x2856e80 <Run+31208>, [49] = 0x2856e0c <Run+31092>, [50] = 0x2856d98 <Run+30976>, [51] = 0x2857188 <Run+31984>, [52] = 0x2857154 <Run+31932>, [53] = 0x28575bc <Run+33060>, [54] = 0x2852038 <Run+11168>, [55] = 0x2852010 <Run+11128>, [56] = 0x28570ec <Run+31828>, [57] = 0x2857554 <Run+32956>, [58] = 0x28574ec <Run+32852>, [59] = 0x2856ca4 <Run+30732>, [60] = 0x2856c7c <Run+30692>, [61] = 0x2857288 <Run+32240>, [62] = 0x2851ff8 <Run+11104>, [63] = 0x2851fd0 <Run+11064>, [64] = 0x2851fcc <Run+11060>, [65] = 0x2851fc8 <Run+11056>, [66] = 0x2851fc4 <Run+11052>, [67] = 0x2851fc0 <Run+11048>, [68] = 0x2851fac <Run+11028>, [69] = 0x2851fa8 <Run+11024>, [70] = 0x284f730 <Run+664>, [71] = 0x284f730 <Run+664>, [72] = 0x2851fbc <Run+11044>, [73] = 0x2851fb8 <Run+11040>, [74] = 0x2851fb4 <Run+11036>, [75] = 0x2851fb0 <Run+11032>, [76] = 0x2851298 <Run+7680>, [77] = 0x2851294 <Run+7676>, [78] = 0x284f6f8 <Run+608>, [79] = 0x284f6f8 <Run+608>, [80] = 0x28512a4 <Run+7692>, [81] = 0x28512a0 <Run+7688>, [82] = 0x285129c <Run+7684>, [83] = 0x2851278 <Run+7648>, [84] = 0x28512a8 <Run+7696>, [85] = 0x2851274 <Run+7644>, [86] = 0x284f778 <Run+736>, [87] = 0x284f778 <Run+736>, [88] = 0x2851288 <Run+7664>, [89] = 0x2851284 <Run+7660>, [90] = 0x2851280 <Run+7656>, [91] = 0x285127c <Run+7652>, [92] = 0x2850e54 <Run+6588>, [93] = 0x2850e50 <Run+6584>, [94] = 0x284f6c8 <Run+560>, [95] = 0x284f6c8 <Run+560>, [96] = 0x2850f60 <Run+6856>, [97] = 0x2850ed4 <Run+6716>, [98] = 0x2850e90 <Run+6648>, [99] = 0x284f86c <Run+980>, [100] = 0x2850e58 <Run+6592>, [101] = 0x2856350 <Run+28344>, [102] = 0x284f850 <Run+952>, [103] = 0x2858994 <Run+38140>, [104] = 0x2858968 <Run+38096>, [105] = 0x28588ec <Run+37972>, [106] = 0x28588bc <Run+37924>, [107] = 0x28562d0 <Run+28216>, [108] = 0x2856288 <Run+28144>, [109] = 0x2856240 <Run+28072>, [110] = 0x2856210 <Run+28024>, [111] = 0x285c224 <Run+52620>, [112] = 0x285c1f0 <Run+52568>, [113] = 0x285850c <Run+36980>, [114] = 0x28584d8 <Run+36928>, [115] = 0x285c1b8 <Run+52512>, [116] = 0x2855690 <Run+25080>, [117] = 0x285565c <Run+25028>, [118] = 0x2855618 <Run+24960>, [119] = 0x285c320 <Run+52872>, [120] = 0x285c28c <Run+52724>, [121] = 0x285c184 <Run+52460>, [122] = 0x285c150 <Run+52408>, [123] = 0x2858154 <Run+36028>, [124] = 0x285811c <Run+35972>, [125] = 0x285c254 <Run+52668>, [126] = 0x28580d4 <Run+35900>, [127] = 0x2851ce0 <Run+10312>, [128] = 0x2850824 <Run+5004>, [129] = 0x28512d0 <Run+7736>, [130] = 0x2850824 <Run+5004>, [131] = 0x2851e74 <Run+10716>, [132] = 0x2851e0c <Run+10612>, [133] = 0x2851da4 <Run+10508>, [134] = 0x2851d24 <Run+10380>, [135] = 0x285c568 <Run+53456>, [136] = 0x285c508 <Run+53360>, [137] = 0x285c5d8 <Run+53568>, [138] = 0x285c2c0 <Run+52776>, [139] = 0x285c44c <Run+53172>, [140] = 0x285c3e8 <Run+53072>, [141] = 0x285c4ac <Run+53268>, [142] = 0x28585dc <Run+37188>, [143] = 0x285c37c <Run+52964>, [144] = 0x285c364 <Run+52940>, [145] = 0x285c3e4 <Run+53068>, [146] = 0x285c1ec <Run+52564>, [147] = 0x28559c8 <Run+25904>, [148] = 0x28559c4 <Run+25900>, [149] = 0x285c360 <Run+52936>, [150] = 0x284f7a8 <Run+784>, [151] = 0x284f7a8 <Run+784>, [152] = 0x2854fe0 <Run+23368>, [153] = 0x28559ec <Run+25940>, [154] = 0x284f86c <Run+980>, [155] = 0x28559d4 <Run+25916>, [156] = 0x2855cc4 <Run+26668>, [157] = 0x2855c78 <Run+26592>, [158] = 0x2855c2c <Run+26516>, [159] = 0x2855bf8 <Run+26464>, [160] = 0x2858a38 <Run+38304>, [161] = 0x2858a14 <Run+38268>, [162] = 0x28589f0 <Run+38232>, [163] = 0x28589cc <Run+38196>, [164] = 0x2858aac <Run+38420>, [165] = 0x2858a5c <Run+38340>, [166] = 0x2858afc <Run+38500>, [167] = 0x2855d04 <Run+26732>, [168] = 0x2855bc0 <Run+26408>, [169] = 0x2855b98 <Run+26368>, [170] = 0x2855b58 <Run+26304>, [171] = 0x2855b18 <Run+26240>, [172] = 0x2855ae0 <Run+26184>, [173] = 0x2855aa8 <Run+26128>, [174] = 0x2855a60 <Run+26056>, [175] = 0x2855a18 <Run+25984>, [176] = 0x28559d0 <Run+25912>, [177] = 0x28559cc <Run+25908>, [178] = 0x284f82c <Run+916>, [179] = 0x284f82c <Run+916>, [180] = 0x2855a14 <Run+25980>, [181] = 0x2855a10 <Run+25976>, [182] = 0x284f804 <Run+876>, [183] = 0x284f804 <Run+876>, [184] = 0x2859f4c <Run+43700>, [185] = 0x2859f48 <Run+43696>, [186] = 0x2859f44 <Run+43692>, [187] = 0x2859f40 <Run+43688>, [188] = 0x2859f54 <Run+43708>, [189] = 0x2859f50 <Run+43704>, [190] = 0x284f5ac <Run+276>, [191] = 0x284f5ac <Run+276>, [192] = 0x285a10c <Run+44148>, [193] = 0x2859fc4 <Run+43820>, [194] = 0x2859f88 <Run+43760>, [195] = 0x2859f58 <Run+43712>, [196] = 0x284f86c <Run+980>, [197] = 0x284f86c <Run+980>, [198] = 0x285a2b4 <Run+44572>, [199] = 0x285a254 <Run+44476>...}
opcodes0f = {[0] = 0x28572b0 <Run+32280>, [1] = 0x2856d30 <Run+30872>, [2] = 0x284f86c <Run+980>, [3] = 0x284f86c <Run+980>, [4] = 0x284f86c <Run+980>, [5] = 0x284f86c <Run+980>, [6] = 0x284f86c <Run+980>, [7] = 0x284f86c <Run+980>, [8] = 0x284f86c <Run+980>, [9] = 0x284f86c <Run+980>, [10] = 0x284f86c <Run+980>, [11] = 0x2856d0c <Run+30836>, [12] = 0x284f86c <Run+980>, [13] = 0x284f86c <Run+980>, [14] = 0x284f86c <Run+980>, [15] = 0x284f86c <Run+980>, [16] = 0x2857070 <Run+31704>, [17] = 0x2856ff8 <Run+31584>, [18] = 0x2856f94 <Run+31484>, [19] = 0x2856f30 <Run+31384>, [20] = 0x2855954 <Run+25788>, [21] = 0x28558e0 <Run+25672>, [22] = 0x2855878 <Run+25568>, [23] = 0x2855810 <Run+25464>, [24] = 0x2851c88 <Run+10224>, [25] = 0x284f86c <Run+980>, [26] = 0x2851c44 <Run+10156>, [27] = 0x2856c38 <Run+30624>, [28] = 0x284f86c <Run+980>, [29] = 0x284f86c <Run+980>, [30] = 0x284f86c <Run+980>, [31] = 0x2851c00 <Run+10088>, [32] = 0x284f86c <Run+980>, [33] = 0x284f86c <Run+980>, [34] = 0x284f86c <Run+980>, [35] = 0x284f86c <Run+980>, [36] = 0x284f86c <Run+980>, [37] = 0x284f86c <Run+980>, [38] = 0x284f86c <Run+980>, [39] = 0x284f86c <Run+980>, [40] = 0x2851b84 <Run+9964>, [41] = 0x2851b08 <Run+9840>, [42] = 0x2851a94 <Run+9724>, [43] = 0x2851a18 <Run+9600>, [44] = 0x2851568 <Run+8400>, [45] = 0x2851414 <Run+8060>, [46] = 0x2850224 <Run+3468>, [47] = 0x2850224 <Run+3468>, [48] = 0x284f86c <Run+980>, [49] = 0x28519f0 <Run+9560>, [50] = 0x284f86c <Run+980>, [51] = 0x284f86c <Run+980>, [52] = 0x284f86c <Run+980>, [53] = 0x284f86c <Run+980>, [54] = 0x284f86c <Run+980>, [55] = 0x284f86c <Run+980>, [56] = 0x2851660 <Run+8648>, [57] = 0x284f86c <Run+980>, [58] = 0x284f86c <Run+980>, [59] = 0x284f86c <Run+980>, [60] = 0x284f86c <Run+980>, [61] = 0x284f86c <Run+980>, [62] = 0x284f86c <Run+980>, [63] = 0x284f86c <Run+980>, [64] = 0x2856480 <Run+28648>, [65] = 0x28515e8 <Run+8528>, [66] = 0x2856ab8 <Run+30240>, [67] = 0x2856a40 <Run+30120>, [68] = 0x28569c8 <Run+30000>, [69] = 0x2856950 <Run+29880>, [70] = 0x2856bb4 <Run+30492>, [71] = 0x2856b30 <Run+30360>, [72] = 0x28568d8 <Run+29760>, [73] = 0x2856860 <Run+29640>, [74] = 0x28567e8 <Run+29520>, [75] = 0x2856770 <Run+29400>, [76] = 0x28566f4 <Run+29276>, [77] = 0x2856678 <Run+29152>, [78] = 0x28565f0 <Run+29016>, [79] = 0x2856568 <Run+28880>, [80] = 0x2855ed0 <Run+27192>, [81] = 0x2855e4c <Run+27060>, [82] = 0x2857b0c <Run+34420>, [83] = 0x2857a90 <Run+34296>, [84] = 0x2857a18 <Run+34176>, [85] = 0x28579a0 <Run+34056>, [86] = 0x2857928 <Run+33936>, [87] = 0x28578b0 <Run+33816>, [88] = 0x2857834 <Run+33692>, [89] = 0x28577b8 <Run+33568>, [90] = 0x2857d60 <Run+35016>, [91] = 0x2857cc8 <Run+34864>, [92] = 0x2857c4c <Run+34740>, [93] = 0x2857b98 <Run+34560>, [94] = 0x2857dd8 <Run+35136>, [95] = 0x2857704 <Run+33388>, [96] = 0x2857678 <Run+33248>, [97] = 0x28575f0 <Run+33112>, [98] = 0x285caac <Run+54804>, [99] = 0x285c908 <Run+54384>, [100] = 0x285c888 <Run+54256>, [101] = 0x285c804 <Run+54124>, [102] = 0x2858050 <Run+35768>, [103] = 0x2857f8c <Run+35572>, [104] = 0x2857ee8 <Run+35408>, [105] = 0x2857e54 <Run+35260>, [106] = 0x2858848 <Run+37808>, [107] = 0x2858720 <Run+37512>, [108] = 0x284f86c <Run+980>, [109] = 0x284f86c <Run+980>, [110] = 0x28586b0 <Run+37400>, [111] = 0x2858648 <Run+37296>, [112] = 0x28548d0 <Run+21560>, [113] = 0x2854810 <Run+21368>, [114] = 0x2854770 <Run+21208>, [115] = 0x28546d4 <Run+21052>, [116] = 0x2850dd0 <Run+6456>, [117] = 0x2850d4c <Run+6324>, [118] = 0x2850cc8 <Run+6192>, [119] = 0x2850ca4 <Run+6156>, [120] = 0x284f86c <Run+980>, [121] = 0x284f86c <Run+980>, [122] = 0x284f86c <Run+980>, [123] = 0x284f86c <Run+980>, [124] = 0x284f86c <Run+980>, [125] = 0x284f86c <Run+980>, [126] = 0x2850aac <Run+5652>, [127] = 0x2850a44 <Run+5548>, [128] = 0x2856530 <Run+28824>, [129] = 0x28564f8 <Run+28768>, [130] = 0x285cf44 <Run+55980>, [131] = 0x285ced4 <Run+55868>, [132] = 0x285cf0c <Run+55924>, [133] = 0x285ce64 <Run+55756>, [134] = 0x285cb84 <Run+55020>, [135] = 0x285cb40 <Run+54952>, [136] = 0x285ce9c <Run+55812>, [137] = 0x285cb08 <Run+54896>, [138] = 0x285ce2c <Run+55700>, [139] = 0x285cdf4 <Run+55644>, [140] = 0x285cdb8 <Run+55584>, [141] = 0x285cd7c <Run+55524>, [142] = 0x285848c <Run+36852>, [143] = 0x2858444 <Run+36780>, [144] = 0x28583d8 <Run+36672>, [145] = 0x285836c <Run+36564>, [146] = 0x285cd10 <Run+55416>, [147] = 0x285cca4 <Run+55308>, [148] = 0x285cc38 <Run+55200>, [149] = 0x285cbcc <Run+55092>, [150] = 0x285c788 <Run+54000>, [151] = 0x285c710 <Run+53880>, [152] = 0x285c6a4 <Run+53772>, [153] = 0x285c638 <Run+53664>, [154] = 0x28561a4 <Run+27916>, [155] = 0x2856138 <Run+27808>, [156] = 0x28560c8 <Run+27696>, [157] = 0x2856054 <Run+27580>, [158] = 0x2855fd4 <Run+27452>, [159] = 0x2855f50 <Run+27320>, [160] = 0x2850a18 <Run+5504>, [161] = 0x28509e4 <Run+5452>, [162] = 0x2850c80 <Run+6120>, [163] = 0x2850bfc <Run+5988>, [164] = 0x2850960 <Run+5320>, [165] = 0x2850960 <Run+5320>, [166] = 0x284f86c <Run+980>, [167] = 0x284f86c <Run+980>, [168] = 0x2850bd0 <Run+5944>, [169] = 0x2850b9c <Run+5892>, [170] = 0x284f86c <Run+980>, [171] = 0x2850b10 <Run+5752>, [172] = 0x28502d0 <Run+3640>, [173] = 0x28502d0 <Run+3640>, [174] = 0x28581fc <Run+36196>, [175] = 0x2855dd4 <Run+26940>, [176] = 0x2855d4c <Run+26804>, [177] = 0x2858560 <Run+37064>, [178] = 0x284f86c <Run+980>, [179] = 0x285577c <Run+25316>, [180] = 0x284f86c <Run+980>, [181] = 0x284f86c <Run+980>, [182] = 0x2855724 <Run+25228>, [183] = 0x28556c4 <Run+25132>, [184] = 0x284f86c <Run+980>, [185] = 0x284f86c <Run+980>, [186] = 0x28544c8 <Run+20528>, [187] = 0x2854438 <Run+20384>, [188] = 0x2858188 <Run+36080>, [189] = 0x28543c4 <Run+20268>, [190] = 0x285436c <Run+20180>, [191] = 0x285430c <Run+20084>, [192] = 0x2854288 <Run+19952>, [193] = 0x2854204 <Run+19820>, [194] = 0x285380c <Run+17268>, [195] = 0x28537ac <Run+17172>, [196] = 0x2853a1c <Run+17796>, [197] = 0x2853744 <Run+17068>, [198] = 0x2853688 <Run+16880>, [199] = 0x2853608 <Run+16752>...}
opcodes66 = {[0] = 0x284f86c <Run+980>, [1] = 0x28511f4 <Run+7516>, [2] = 0x284f86c <Run+980>, [3] = 0x2851174 <Run+7388>, [4] = 0x284f86c <Run+980>, [5] = 0x2851138 <Run+7328>, [6] = 0x2853c40 <Run+18344>, [7] = 0x2853c14 <Run+18300>, [8] = 0x284f86c <Run+980>, [9] = 0x28510c0 <Run+7208>, [10] = 0x284f86c <Run+980>, [11] = 0x2851048 <Run+7088>, [12] = 0x284f86c <Run+980>, [13] = 0x2851014 <Run+7036>, [14] = 0x284f86c <Run+980>, [15] = 0x2853bdc <Run+18244>, [16] = 0x284f86c <Run+980>, [17] = 0x28540f8 <Run+19552>, [18] = 0x284f86c <Run+980>, [19] = 0x2854088 <Run+19440>, [20] = 0x284f86c <Run+980>, [21] = 0x285405c <Run+19396>, [22] = 0x284f86c <Run+980>, [23] = 0x284f86c <Run+980>, [24] = 0x284f86c <Run+980>, [25] = 0x2853fec <Run+19284>, [26] = 0x284f86c <Run+980>, [27] = 0x2854194 <Run+19708>, [28] = 0x284f86c <Run+980>, [29] = 0x2854168 <Run+19664>, [30] = 0x284f86c <Run+980>, [31] = 0x284f86c <Run+980>, [32] = 0x284f86c <Run+980>, [33] = 0x2853f74 <Run+19164>, [34] = 0x284f86c <Run+980>, [35] = 0x2853efc <Run+19044>, [36] = 0x284f86c <Run+980>, [37] = 0x2853ec8 <Run+18992>, [38] = 0x2853bc4 <Run+18220>, [39] = 0x284f86c <Run+980>, [40] = 0x284f86c <Run+980>, [41] = 0x2853e48 <Run+18864>, [42] = 0x284f86c <Run+980>, [43] = 0x2853dc8 <Run+18736>, [44] = 0x284f86c <Run+980>, [45] = 0x2853d8c <Run+18676>, [46] = 0x2853bac <Run+18196>, [47] = 0x284f86c <Run+980>, [48] = 0x284f86c <Run+980>, [49] = 0x2853d14 <Run+18556>, [50] = 0x284f86c <Run+980>, [51] = 0x2853c9c <Run+18436>, [52] = 0x284f86c <Run+980>, [53] = 0x2853c68 <Run+18384>, [54] = 0x2853b94 <Run+18172>, [55] = 0x284f86c <Run+980>, [56] = 0x284f86c <Run+980>, [57] = 0x2853b28 <Run+18064>, [58] = 0x284f86c <Run+980>, [59] = 0x2853abc <Run+17956>, [60] = 0x284f86c <Run+980>, [61] = 0x2853a94 <Run+17916>, [62] = 0x284f86c <Run+980>, [63] = 0x284f86c <Run+980>, [64] = 0x2855bf4 <Run+26460>, [65] = 0x2855bf0 <Run+26456>, [66] = 0x2855bec <Run+26452>, [67] = 0x2855be8 <Run+26448>, [68] = 0x2851290 <Run+7672>, [69] = 0x285128c <Run+7668>, [70] = 0x284f68c <Run+500>, [71] = 0x284f68c <Run+500>, [72] = 0x2854ab0 <Run+22040>, [73] = 0x2854aac <Run+22036>, [74] = 0x2854aa8 <Run+22032>, [75] = 0x2854aa4 <Run+22028>, [76] = 0x2854aa0 <Run+22024>, [77] = 0x2854a9c <Run+22020>, [78] = 0x284f650 <Run+440>, [79] = 0x284f650 <Run+440>, [80] = 0x2854ad0 <Run+22072>, [81] = 0x2854acc <Run+22068>, [82] = 0x2854ac8 <Run+22064>, [83] = 0x2854ac4 <Run+22060>, [84] = 0x2854ac0 <Run+22056>, [85] = 0x2854abc <Run+22052>, [86] = 0x284f624 <Run+396>, [87] = 0x284f624 <Run+396>, [88] = 0x2854ae8 <Run+22096>, [89] = 0x2854ae4 <Run+22092>, [90] = 0x2854ae0 <Run+22088>, [91] = 0x2854adc <Run+22084>, [92] = 0x2854ad8 <Run+22080>, [93] = 0x2854ad4 <Run+22076>, [94] = 0x284f5f8 <Run+352>, [95] = 0x284f5f8 <Run+352>, [96] = 0x2854c04 <Run+22380>, [97] = 0x2854b8c <Run+22260>, [98] = 0x284f86c <Run+980>, [99] = 0x284f86c <Run+980>, [100] = 0x284f86c <Run+980>, [101] = 0x284f86c <Run+980>, [102] = 0x284f850 <Run+952>, [103] = 0x284f86c <Run+980>, [104] = 0x2854b68 <Run+22224>, [105] = 0x2854ca8 <Run+22544>, [106] = 0x2854c80 <Run+22504>, [107] = 0x2854aec <Run+22100>, [108] = 0x284f86c <Run+980> <repeats 21 times>, [129] = 0x2850354 <Run+3772>, [130] = 0x284f86c <Run+980>, [131] = 0x2850354 <Run+3772>, [132] = 0x284f86c <Run+980>, [133] = 0x2854960 <Run+21704>, [134] = 0x284f86c <Run+980>, [135] = 0x2854a30 <Run+21912>, [136] = 0x284f86c <Run+980>, [137] = 0x28549cc <Run+21812>, [138] = 0x284f86c <Run+980>, [139] = 0x285515c <Run+23748>, [140] = 0x28550f8 <Run+23648>, [141] = 0x284f86c <Run+980>, [142] = 0x285508c <Run+23540>, [143] = 0x285502c <Run+23444>, [144] = 0x2855014 <Run+23420>, [145] = 0x2855010 <Run+23416>, [146] = 0x285500c <Run+23412>, [147] = 0x2855008 <Run+23408>, [148] = 0x2855004 <Run+23404>, [149] = 0x2855000 <Run+23400>, [150] = 0x284f7d4 <Run+828>, [151] = 0x284f7d4 <Run+828>, [152] = 0x2854fc0 <Run+23336>, [153] = 0x2854f9c <Run+23300>, [154] = 0x284f86c <Run+980>, [155] = 0x284f86c <Run+980>, [156] = 0x2854f64 <Run+23244>, [157] = 0x2854efc <Run+23140>, [158] = 0x284f86c <Run+980>, [159] = 0x284f86c <Run+980>, [160] = 0x284f86c <Run+980>, [161] = 0x2854ed8 <Run+23104>, [162] = 0x284f86c <Run+980>, [163] = 0x2854eb4 <Run+23068>, [164] = 0x284f86c <Run+980>, [165] = 0x2854e64 <Run+22988>, [166] = 0x284f86c <Run+980>, [167] = 0x2854e1c <Run+22916>, [168] = 0x284f86c <Run+980>, [169] = 0x2854df4 <Run+22876>, [170] = 0x284f86c <Run+980>, [171] = 0x2854db4 <Run+22812>, [172] = 0x284f86c <Run+980>, [173] = 0x2854d7c <Run+22756>, [174] = 0x284f86c <Run+980>, [175] = 0x2854d34 <Run+22684>, [176] = 0x284f86c <Run+980>, [177] = 0x284f86c <Run+980>, [178] = 0x284f86c <Run+980>, [179] = 0x284f86c <Run+980>, [180] = 0x284f86c <Run+980>, [181] = 0x284f86c <Run+980>, [182] = 0x284f86c <Run+980>, [183] = 0x284f86c <Run+980>, [184] = 0x2854d30 <Run+22680>, [185] = 0x2854d2c <Run+22676>, [186] = 0x2854d28 <Run+22672>, [187] = 0x2854d24 <Run+22668>, [188] = 0x2854ab8 <Run+22048>, [189] = 0x2854ab4 <Run+22044>, [190] = 0x284f5d0 <Run+312>, [191] = 0x284f5d0 <Run+312>, [192] = 0x284f86c <Run+980>, [193] = 0x2855340 <Run+24232>, [194] = 0x284f86c <Run+980>, [195] = 0x284f86c <Run+980>, [196] = 0x284f86c <Run+980>, [197] = 0x284f86c <Run+980>, [198] = 0x284f86c <Run+980>, [199] = 0x28552e0 <Run+24136>, [200] = 0x284f86c <Run+980>, [201] = 0x284f86c <Run+980>, [202] = 0x284f86c <Run+980>, [203] = 0x284f86c <Run+980>, [204] = 0x284f86c <Run+980>, [205] = 0x284f86c <Run+980>, [206] = 0x284f86c <Run+980>, [207] = 0x284f86c <Run+980>, [208] = 0x284f86c <Run+980>, [209] = 0x28504a4 <Run+4108>, [210] = 0x284f86c <Run+980>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#8 0x0281010c in main (argc=<optimized out>, argv=<optimized out>, env=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/main.c:993
prog = 0xfffef4b8 "./benchfloat"
nextarg = <optimized out>
ld_preload = {
size = 0,
cap = 0,
paths = 0x0
}
prgname = <optimized out>
f = <optimized out>
elf_header = 0x2bb46e8
emu = 0x2bb36e0
ret = <optimized out>
>>> info threads
Id Target Id Frame
* 1 Thread 0xf7d69010 (LWP 177) "box86" 0x02843fc8 in GetDynablocksFromAddress (context=0xf7968008, addr=addr@entry=0) at /mnt/crypt1/projects/builds/box86/src/elfs/elfloader.c:979
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:FF0047D8
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test01
Read 31 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 30)
Loading SymTab (idx = 29)
Loading Dynamic (idx = 22)
Rel Table @0x80482b8 (0x8/0x8)
PLT Table @0x80482c0 (type=17 0x10/0x8)
The GOT.PLT Table is at address 0x804a000
The GOT Table is at address 0x8049ffc
The .init is at address 0x80482d0
The .init_array is at address 0x8049f08, and have 1 elements
The .fini is at address 0x8048524
The .fini_array is at address 0x8049f0c, and have 1 elements
The .text is at address 0x8048340, and is 482 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test01" as #0 in elf collection
Elf Addr(v/p)=0x8048000/0x8048000 Memsize=0x2020 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x3000 memory @0x8048000 for Elf "./test01"
Loading block #2 @0x8048000 (0x648/0x648)
Add ELF eXecutable Memory 0x8048000:0x648
addDBFromAddressRange 0x8048000 -> 0x8048647
Loading block #3 @0x8049f08 (0x114/0x118)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test01...
Applying 1 Relocation(s) for ./test01
PLT Resolver injected in plt.got at 0x804a008
Applying 2 PLT Relocation(s) for ./test01
Entry Point is 0x8048340
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0x8048340, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=8 Return=0x8048361: elf is ./test01
PltReolver: Apply Global R_386_JMP_SLOT @0x804a010 with sym=__libc_start_main (0x8048326 -> 0x2bb7883 / (noelf))
return 0x00000001
0183|0x8048361: Calling __libc_start_main (0804843B, 00000001, F79663C0...) =>Calling init(0x80484c0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0x80484c0) => 0x2bb67e8 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 536 bytes for 93 x86 bytes ( => ./test01/__libc_csu_init)
0x80484c0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0x80484c1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0x80484c2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0x80484c3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0x80484c4: E8 A7 FE FF FF CALL Id (=> ./test01/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30874c9 MOVW r7, #0x84c9
e3407804 MOVT r7, #0x804
0x80484c9: 81 C3 37 1B 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013b37 MOVW r3, #0x1b37
e0877003 ADD r7, r7, r3
0x80484cf: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0x80484d2: 8B 6C 24 20 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989020 LDR r9, [r8, #32]
0x80484d6: 8D B3 0C FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0f4 SUB r10, r7, #0xf4
----> potential Son here
0x80484dc: E8 EF FD FF FF CALL Id (=> ./test01/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0x80484e1/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30824e1 MOVW r2, #0x84e1
e3402804 MOVT r2, #0x804
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e308c2d0 MOVW r12, #0x82d0
e340c804 MOVT r12, #0x804
e3031680 MOVW r1, #0x3680
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0x80484e1: 8D 83 08 FF FF FF LEA Gd, Ed
0xf6d6707c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e24740f8 SUB r4, r7, #0xf8
0x80484e7: 29 C6 SUB Ed, Gd
0xf6d67080: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0x80484e9: C1 FE 02 SAR Ed, Ib
0xf6d67084: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0x80484ec: 85 F6 TEST Ed, Gd
0xf6d67088: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x80484ee: 74 25 JZ ib
0xf6d6709c: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0x80484f0: 31 FF XOR Ed, Gd
0xf6d670a8: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0x80484f2: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670ac: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0x80484f8: 83 EC 04 SUB Ed, Ib
0xf6d670ac: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0x80484fb: FF 74 24 2C PUSH Ed
0xf6d670b0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0x80484ff: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0x8048503: 55 PUSH reg
0xf6d670c0: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
----> potential Son here
0x8048504: FF 94 BB 08 FF FF FF CALL Ed
0xf6d670c4: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c0f8 LDR r12, [r2, #-248]
CStack PUSH 0x804850b/0xf6d67138-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e308250b MOVW r2, #0x850b
e3402804 MOVT r2, #0x804
e3073138 MOVW r3, #0x7138
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e3031690 MOVW r1, #0x3690
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0x804850b: 83 C7 01 ADD Ed, Ib
0xf6d67138: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0x804850e: 83 C4 10 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0x8048511: 39 F7 CMP Ed, Gd
0xf6d67140: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05b300a SUBS r3, r11, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x8048513: 75 E3 JNZ ib
0xf6d67154: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0x8048515: 83 C4 0C ADD Ed, Ib
0xf6d67160: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0x8048518: 5B POP reg
0xf6d671cc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0x8048519: 5E POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0x804851a: 5F POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0x804851b: 5D POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0x804851c: C3 RET
0xf6d671dc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0x80484c0:0x804851d (0xf6d67000, 0x218 bytes, with 6 son(s))
Running DynaRec Block @0x80484c0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 340 bytes for 35 x86 bytes ( => ./test01/)
0x80482d0: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0x80482d1: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0x80482d4: E8 97 00 00 00 CALL Id (=> ./test01/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30872d9 MOVW r7, #0x82d9
e3407804 MOVT r7, #0x804
0x80482d9: 81 C3 27 1D 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013d27 MOVW r3, #0x1d27
e0877003 ADD r7, r7, r3
0x80482df: 8B 83 FC FF FF FF MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5174004 LDR r4, [r7, #-4]
0x80482e5: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x80482e7: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00001a BEQ +28
----> potential Son here
0x80482e9: E8 42 00 00 00 CALL Id (=> ./test01/)
0xf6d6733c: 27 emited opcodes, state=1/0, set=3F, use=0, need=0
e30822ee MOVW r2, #0x82ee
e3402804 MOVT r2, #0x804
e9280004 STMDB r8!, {r2}
Native Call to __gmon_start__ (retn=0)
e307c851 MOVW r12, #0x7851
e340c2bb MOVT r12, #0x2bb
e8801ff0 STM r0, {r4-r12}
e92d0001 PUSH {r0}
e3063378 MOVW r3, #0x6378
e3403288 MOVT r3, #0x288
e12fff33 BLX r3
e8bd0001 POP {r0}
e8901ff0 LDM r0, {r4-r12}
e307385b MOVW r3, #0x785b
e34032bb MOVT r3, #0x2bb
e15c0003 CMP r12, r3
1a000007 BNE +9
e8b81000 LDM r8!, {r12}
e30832ee MOVW r3, #0x82ee
e3403804 MOVT r3, #0x804
e15c0003 CMP r12, r3
1a000002 BNE +4
e5901358 LDR r1, [r0, #856]
e3510001 CMP r1, #0x1
1a000002 BNE +4
Jump to epilog
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
----> potential Son here
0x80482ee: 83 C4 08 ADD Ed, Ib
0xf6d673a8: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0x80482f1: 5B POP reg
0xf6d67414: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0x80482f2: C3 RET
0xf6d67418: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0x80482d0:0x80482f3 (0xf6d67300, 0x154 bytes, with 2 son(s))

Program received signal SIGSEGV, Segmentation fault.
0xf6d67400 in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf6d67400 ? ldr r12, [r12, r3, lsr #3]
0xf6d67404 ? and r3, r8, #31
0xf6d67408 ? mvn r12, r12, lsr r3
0xf6d6740c ? and r12, r12, #1
0xf6d67410 ? str r12, [r0, #44] ; 0x2c
0xf6d67414 ? ldm r8!, {r7}
0xf6d67418 ? ldm r8!, {r12}
0xf6d6741c ? ldr r1, [r0, #884] ; 0x374
0xf6d67420 ? sub r1, r1, #1
0xf6d67424 ? and r1, r1, #31
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02bb36d8 r1 0x02bc3680 r2 0x02bc3680 r3 0xf6d67300 r4 0x00000001 r5 0xf79663c0 r6 0x00000000 r7 0x0804a000 r8 0xf796636c r9 0x00000001 r10 0x08049f0c
r11 0x00000000 r12 0x080482d0 sp 0xfffeee34 lr 0x02893a30 pc 0xf6d67400 cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf6d67400
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 183 name box86 from 0xf6d67400
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> x/10i $pc-32
0xf6d673e0: str r12, [r0, #36] ; 0x24
0xf6d673e4: movwvc r12, #0
0xf6d673e8: movwvs r12, #1
0xf6d673ec: str r12, [r0, #80] ; 0x50
0xf6d673f0: ubfx r3, r8, #31, #1
0xf6d673f4: str r3, [r0, #64] ; 0x40
0xf6d673f8: and r3, r8, #224 ; 0xe0
0xf6d673fc: ldr r12, [r0, #780] ; 0x30c
=> 0xf6d67400: ldr r12, [r12, r3, lsr #3]
0xf6d67404: and r3, r8, #31
>>> backtrace full
#0 0xf6d67400 in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=134520832, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=134520832) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2450
block = 0x1
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = 134513360
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0x42ac2d14)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf6d673e0: str r12, [r0, #36] ; 0x24
0xf6d673e4: movwvc r12, #0
0xf6d673e8: movwvs r12, #1
0xf6d673ec: str r12, [r0, #80] ; 0x50
0xf6d673f0: ubfx r3, r8, #31, #1
0xf6d673f4: str r3, [r0, #64] ; 0x40
0xf6d673f8: and r3, r8, #224 ; 0xe0
0xf6d673fc: ldr r12, [r0, #780] ; 0x30c
=> 0xf6d67400: ldr r12, [r12, r3, lsr #3]
0xf6d67404: and r3, r8, #31
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:AE00FC59
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test02
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x368 (0x40/0x8)
PLT Table @0x3a8 (type=17 0x18/0x8)
The GOT Table is at address 0x1fd4
The .init is at address 0x3c0
The .init_array is at address 0x1ed4, and have 1 elements
The .fini is at address 0x674
The .fini_array is at address 0x1ed8, and have 1 elements
The .text is at address 0x440, and is 564 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test02" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x200c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x200c memory @(nil) for Elf "./test02"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0x7d4/0x7d4)
Add ELF eXecutable Memory 0xf7fea000:0x7d4
addDBFromAddressRange 0xf7fea000 -> 0xf7fea7d3
Loading block #3 @0xf7febed4 (0x134/0x138)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test02...
Applying 8 Relocation(s) for ./test02
PLT Resolver injected in plt.got at 0xf7febfdc
Applying 3 PLT Relocation(s) for ./test02
Entry Point is 0xf7fea4b5
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea4b5, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=8 Return=0xf7fea4e6: elf is ./test02
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfe4 with sym=__libc_start_main (0xf7fea416 -> 0x2bb7951 / (noelf))
return 0xF7FEA5F0
0198|0xf7fea4e6: Calling __libc_start_main (F7FEA440, 00000001, F79663C0...) =>Calling init(0xf7fea5f0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea5f0) => 0x2bb6850 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test02/__libc_csu_init)
0xf7fea5f0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea5f1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea5f2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea5f3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea5f4: E8 F7 FE FF FF CALL Id (=> ./test02/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a75f9 MOVW r7, #0xa5f9
e34f77fe MOVT r7, #0xf7fe
0xf7fea5f9: 81 C3 DB 19 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e30139db MOVW r3, #0x19db
e0877003 ADD r7, r7, r3
0xf7fea5ff: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea602: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea606: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea60c: E8 AF FD FF FF CALL Id (=> ./test02/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea611/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a2611 MOVW r2, #0xa611
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac3c0 MOVW r12, #0xa3c0
e34fc7fe MOVT r12, #0xf7fe
e30214e0 MOVW r1, #0x24e0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea611: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea617: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea619: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea61c: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea61e: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea620: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea622: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea628: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea62b: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea62c: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea630: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea634: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea63b/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a263b MOVW r2, #0xa63b
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30214f0 MOVW r1, #0x24f0
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea63b: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea63e: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea641: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea643: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea645: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea648: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea649: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea64a: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea64b: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea64c: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea5f0:0xf7fea64d (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea5f0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test02/)
0xf7fea3c0: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea3c1: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea3c4: E8 27 01 00 00 CALL Id (=> ./test02/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a73c9 MOVW r7, #0xa3c9
e34f77fe MOVT r7, #0xf7fe
0xf7fea3c9: 81 C3 0B 1C 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013c0b MOVW r3, #0x1c0b
e0877003 ADD r7, r7, r3
0xf7fea3cf: 8B 83 20 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5974020 LDR r4, [r7, #32]
0xf7fea3d5: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea3d7: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea3d9: E8 5A 00 00 00 CALL Id (=> ./test02/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea3de/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a23de MOVW r2, #0xa3de
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac438 MOVW r12, #0xa438
e34fc7fe MOVT r12, #0xf7fe
e30214a8 MOVW r1, #0x24a8
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea3de: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea3e1: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea3e2: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea3c0:0xf7fea3e3 (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796635c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796635c ? ; <UNDEFINED> instruction: 0xf7fea3de
0xf7966360 ? andeq r0, r0, r0
0xf7966364 ? andeq r0, r0, r0
0xf7966368 ? ; <UNDEFINED> instruction: 0xf7febfd4
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fea611
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febfd4
0xf7966380 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0xeffd7db1 r1 0xfab9dab6 r2 0xf7fea3de r3 0xf6d6738c r4 0x02bb78fc r5 0xf79663c0 r6 0x00000000 r7 0xf7febfd4 r8 0xf796635c r9 0x02bb18c8 r10 0xf7febed8
r11 0x00000000 r12 0xf7fea438 sp 0xfffeee34 lr 0x02893a30 pc 0xf796635c cpsr 0x40000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796635c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 198 name box86 from 0xf796635c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> x/10i $pc-32
0xf796633c: andeq r0, r0, r0
0xf7966340: andeq r0, r0, r0
0xf7966344: andeq r0, r0, r0
0xf7966348: andeq r0, r0, r0
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: andeq r0, r0, r0
=> 0xf796635c: ; <UNDEFINED> instruction: 0xf7fea3de
0xf7966360: andeq r0, r0, r0
>>> backtrace full
#0 0xf796635c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667604, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667604) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc27b0
block = 0x2bb78fc
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134306760
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27d3854)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:8E002423
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test03
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x328 (0x40/0x8)
PLT Table @0x368 (type=17 0x10/0x8)
The GOT Table is at address 0x1fd8
The .init is at address 0x378
The .init_array is at address 0x1ed8, and have 1 elements
The .fini is at address 0x5c4
The .fini_array is at address 0x1edc, and have 1 elements
The .text is at address 0x3e0, and is 482 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test03" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x200c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x200c memory @(nil) for Elf "./test03"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0x70c/0x70c)
Add ELF eXecutable Memory 0xf7fea000:0x70c
addDBFromAddressRange 0xf7fea000 -> 0xf7fea70b
Loading block #3 @0xf7febed8 (0x130/0x134)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test03...
Applying 8 Relocation(s) for ./test03
PLT Resolver injected in plt.got at 0xf7febfe0
Applying 2 PLT Relocation(s) for ./test03
Entry Point is 0xf7fea3e0
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea3e0, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=8 Return=0xf7fea411: elf is ./test03
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfe8 with sym=__libc_start_main (0xf7fea3c6 -> 0x2bb78c9 / (noelf))
return 0xF7FEA560
0203|0xf7fea411: Calling __libc_start_main (F7FEA51D, 00000001, F79663C0...) =>Calling init(0xf7fea560) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea560) => 0x2bb67c8 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test03/__libc_csu_init)
0xf7fea560: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea561: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea562: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea563: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea564: E8 B7 FE FF FF CALL Id (=> ./test03/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7569 MOVW r7, #0xa569
e34f77fe MOVT r7, #0xf7fe
0xf7fea569: 81 C3 6F 1A 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013a6f MOVW r3, #0x1a6f
e0877003 ADD r7, r7, r3
0xf7fea56f: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea572: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea576: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea57c: E8 F7 FD FF FF CALL Id (=> ./test03/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea581/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a2581 MOVW r2, #0xa581
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac378 MOVW r12, #0xa378
e34fc7fe MOVT r12, #0xf7fe
e30213c0 MOVW r1, #0x23c0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea581: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea587: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea589: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea58c: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea58e: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea590: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea592: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea598: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea59b: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea59c: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea5a0: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea5a4: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea5ab/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a25ab MOVW r2, #0xa5ab
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30213d0 MOVW r1, #0x23d0
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea5ab: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea5ae: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea5b1: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea5b3: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea5b5: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea5b8: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea5b9: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea5ba: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea5bb: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea5bc: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea560:0xf7fea5bd (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea560 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test03/)
0xf7fea378: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea379: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea37c: E8 9F 00 00 00 CALL Id (=> ./test03/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7381 MOVW r7, #0xa381
e34f77fe MOVT r7, #0xf7fe
0xf7fea381: 81 C3 57 1C 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013c57 MOVW r3, #0x1c57
e0877003 ADD r7, r7, r3
0xf7fea387: 8B 83 1C 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e597401c LDR r4, [r7, #28]
0xf7fea38d: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea38f: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea391: E8 42 00 00 00 CALL Id (=> ./test03/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea396/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a2396 MOVW r2, #0xa396
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac3d8 MOVW r12, #0xa3d8
e34fc7fe MOVT r12, #0xf7fe
e3021730 MOVW r1, #0x2730
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea396: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea399: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea39a: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea378:0xf7fea39b (0xf6d67300, 0x138 bytes, with 2 son(s))
Emitting 56 bytes for 6 x86 bytes ( => ./test03/ + 8)
0xf7fea3d8: FF A3 1C 00 00 00 JMP Ed
0xf6d67500: 14 emited opcodes, state=0/0, set=0, use=0, need=0
e597c01c LDR r12, [r7, #28]
Jump to linker (#0) nolinker=0
e3021b10 MOVW r1, #0x2b10
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0xf7fea3d8:0xf7fea3de (0xf6d67500, 0x38 bytes, with 0 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796635c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796635c ? ; <UNDEFINED> instruction: 0xf7fea396
0xf7966360 ? andeq r0, r0, r0
0xf7966364 ? andeq r0, r0, r0
0xf7966368 ? ; <UNDEFINED> instruction: 0xf7febfd8
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fea581
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febfd8
0xf7966380 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02bb36d8 r1 0x02bc2b10 r2 0x029078a0 r3 0x02bb7874 r4 0x02bb7874 r5 0xf79663c0 r6 0x00000000 r7 0xf7febfd8 r8 0xf796635c r9 0x02bb18c8 r10 0xf7febedc
r11 0x00000000 r12 0x02bb7874 sp 0xfffeee34 lr 0x02893a30 pc 0xf796635c cpsr 0x80000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796635c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 203 name box86 from 0xf796635c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> x/10i $pc-32
0xf796633c: andeq r0, r0, r0
0xf7966340: andeq r0, r0, r0
0xf7966344: andeq r0, r0, r0
0xf7966348: andeq r0, r0, r0
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: andeq r0, r0, r0
=> 0xf796635c: ; <UNDEFINED> instruction: 0xf7fea396
0xf7966360: andeq r0, r0, r0
>>> backtrace full
#0 0xf796635c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667608, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667608) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2618
block = 0x2bb7874
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = 45840500
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0x1863da34)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796633c: andeq r0, r0, r0
0xf7966340: andeq r0, r0, r0
0xf7966344: andeq r0, r0, r0
0xf7966348: andeq r0, r0, r0
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: andeq r0, r0, r0
=> 0xf796635c: ; <UNDEFINED> instruction: 0xf7fea396
0xf7966360: andeq r0, r0, r0
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:739700BA
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test04
Read 36 Section header
Read 9 Program header
Loading Sections Table String (idx = 35)
Loading SymTab Strings (idx = 34)
Loading SymTab (idx = 33)
Loading Dynamic (idx = 21)
Rel Table @0x34c (0x40/0x8)
PLT Table @0x38c (type=17 0x10/0x8)
The GOT Table is at address 0x1fd8
The .init is at address 0x39c
The .init_array is at address 0x1ed8, and have 1 elements
The .fini is at address 0x5e4
The .fini_array is at address 0x1edc, and have 1 elements
The .text is at address 0x400, and is 482 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test04" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x200c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x200c memory @(nil) for Elf "./test04"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0x738/0x738)
Add ELF eXecutable Memory 0xf7fea000:0x738
addDBFromAddressRange 0xf7fea000 -> 0xf7fea737
Loading block #3 @0xf7febed8 (0x130/0x134)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test04...
Applying 8 Relocation(s) for ./test04
PLT Resolver injected in plt.got at 0xf7febfe0
Applying 2 PLT Relocation(s) for ./test04
Entry Point is 0xf7fea448
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea448, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=0 Return=0xf7fea479: elf is ./test04
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfe4 with sym=__libc_start_main (0xf7fea3d6 -> 0x2bb7ac8 / (noelf))
return 0xF7FEA580
0208|0xf7fea479: Calling __libc_start_main (F7FEA400, 00000001, F79663C0...) =>Calling init(0xf7fea580) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea580) => 0x2bb69d8 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test04/__libc_csu_init)
0xf7fea580: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea581: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea582: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea583: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea584: E8 F7 FE FF FF CALL Id (=> ./test04/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7589 MOVW r7, #0xa589
e34f77fe MOVT r7, #0xf7fe
0xf7fea589: 81 C3 4F 1A 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013a4f MOVW r3, #0x1a4f
e0877003 ADD r7, r7, r3
0xf7fea58f: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea592: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea596: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea59c: E8 FB FD FF FF CALL Id (=> ./test04/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea5a1/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a25a1 MOVW r2, #0xa5a1
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac39c MOVW r12, #0xa39c
e34fc7fe MOVT r12, #0xf7fe
e30215d0 MOVW r1, #0x25d0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea5a1: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea5a7: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea5a9: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea5ac: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea5ae: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea5b0: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea5b2: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea5b8: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea5bb: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea5bc: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea5c0: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea5c4: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea5cb/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a25cb MOVW r2, #0xa5cb
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30215e0 MOVW r1, #0x25e0
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea5cb: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea5ce: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea5d1: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea5d3: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea5d5: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea5d8: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea5d9: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea5da: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea5db: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea5dc: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea580:0xf7fea5dd (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea580 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test04/)
0xf7fea39c: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea39d: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea3a0: E8 DB 00 00 00 CALL Id (=> ./test04/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a73a5 MOVW r7, #0xa3a5
e34f77fe MOVT r7, #0xf7fe
0xf7fea3a5: 81 C3 33 1C 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013c33 MOVW r3, #0x1c33
e0877003 ADD r7, r7, r3
0xf7fea3ab: 8B 83 1C 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e597401c LDR r4, [r7, #28]
0xf7fea3b1: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea3b3: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea3b5: E8 3E 00 00 00 CALL Id (=> ./test04/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea3ba/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a23ba MOVW r2, #0xa3ba
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac3f8 MOVW r12, #0xa3f8
e34fc7fe MOVT r12, #0xf7fe
e3021930 MOVW r1, #0x2930
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea3ba: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea3bd: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea3be: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea39c:0xf7fea3bf (0xf6d67300, 0x138 bytes, with 2 son(s))
Emitting 56 bytes for 6 x86 bytes ( => ./test04/ + 8)
0xf7fea3f8: FF A3 1C 00 00 00 JMP Ed
0xf6d67500: 14 emited opcodes, state=0/0, set=0, use=0, need=0
e597c01c LDR r12, [r7, #28]
Jump to linker (#0) nolinker=0
e3021d10 MOVW r1, #0x2d10
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0xf7fea3f8:0xf7fea3fe (0xf6d67500, 0x38 bytes, with 0 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796636c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fea5a1
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febfd8
0xf7966380 ? andeq r0, r0, r1
0xf7966384 ? andeq r0, r0, r0
0xf7966388 ? andeq r0, r0, r0
0xf796638c ? adcseq r10, r10, #164, 30 ; 0x290
0xf7966390 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0xeffd7db9 r1 0x05776008 r2 0x02bc2930 r3 0xf6d67500 r4 0xf7fea580 r5 0xf79663c0 r6 0x00000000 r7 0xf7febfd8 r8 0xf7966368 r9 0x02bb18c8 r10 0xf7febedc
r11 0x00000000 r12 0xf7fea3f8 sp 0xfffeee34 lr 0x02893a30 pc 0xf796636c cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796636c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 208 name box86 from 0xf796636c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796636c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667608, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667608) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2818
block = 0xf7fea580
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134306824
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27d3654)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: andeq r0, r0, r0
0xf796635c: andeq r0, r0, r0
0xf7966360: andeq r0, r0, r0
0xf7966364: andeq r0, r0, r0
0xf7966368: ; <UNDEFINED> instruction: 0xf6d67300
=> 0xf796636c: ; <UNDEFINED> instruction: 0xf7fea5a1
0xf7966370: andeq r0, r0, r0
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:16FD7900
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test05
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x3b0 (0x40/0x8)
PLT Table @0x3f0 (type=17 0x30/0x8)
The GOT Table is at address 0x1fc8
The .init is at address 0x420
The .init_array is at address 0x1ec8, and have 1 elements
The .fini is at address 0x924
The .fini_array is at address 0x1ecc, and have 1 elements
The .text is at address 0x4d0, and is 1106 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test05" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x200c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x200c memory @(nil) for Elf "./test05"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0xb48/0xb48)
Add ELF eXecutable Memory 0xf7fea000:0xb48
addDBFromAddressRange 0xf7fea000 -> 0xf7feab47
Loading block #3 @0xf7febec8 (0x140/0x144)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test05...
Applying 8 Relocation(s) for ./test05
PLT Resolver injected in plt.got at 0xf7febfd0
Applying 6 PLT Relocation(s) for ./test05
Entry Point is 0xf7fea744
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea744, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=8 Return=0xf7fea775: elf is ./test05
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfd8 with sym=__libc_start_main (0xf7fea476 -> 0x2bb7a09 / (noelf))
return 0xF7FEA8C0
0213|0xf7fea775: Calling __libc_start_main (F7FEA4D0, 00000001, F79663C0...) =>Calling init(0xf7fea8c0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea8c0) => 0x2bb6908 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test05/__libc_csu_init)
0xf7fea8c0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea8c1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea8c2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea8c3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea8c4: E8 B7 FE FF FF CALL Id (=> ./test05/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a78c9 MOVW r7, #0xa8c9
e34f77fe MOVT r7, #0xf7fe
0xf7fea8c9: 81 C3 FF 16 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e30136ff MOVW r3, #0x16ff
e0877003 ADD r7, r7, r3
0xf7fea8cf: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea8d2: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea8d6: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea8dc: E8 3F FB FF FF CALL Id (=> ./test05/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea8e1/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a28e1 MOVW r2, #0xa8e1
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac420 MOVW r12, #0xa420
e34fc7fe MOVT r12, #0xf7fe
e3021598 MOVW r1, #0x2598
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea8e1: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea8e7: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea8e9: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea8ec: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea8ee: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea8f0: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea8f2: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea8f8: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea8fb: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea8fc: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea900: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea904: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea90b/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a290b MOVW r2, #0xa90b
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30215a8 MOVW r1, #0x25a8
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea90b: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea90e: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea911: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea913: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea915: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea918: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea919: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea91a: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea91b: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea91c: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea8c0:0xf7fea91d (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea8c0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test05/)
0xf7fea420: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea421: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea424: E8 57 03 00 00 CALL Id (=> ./test05/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7429 MOVW r7, #0xa429
e34f77fe MOVT r7, #0xf7fe
0xf7fea429: 81 C3 9F 1B 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013b9f MOVW r3, #0x1b9f
e0877003 ADD r7, r7, r3
0xf7fea42f: 8B 83 2C 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e597402c LDR r4, [r7, #44]
0xf7fea435: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea437: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea439: E8 8A 00 00 00 CALL Id (=> ./test05/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea43e/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a243e MOVW r2, #0xa43e
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac4c8 MOVW r12, #0xa4c8
e34fc7fe MOVT r12, #0xf7fe
e3021560 MOVW r1, #0x2560
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea43e: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea441: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea442: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea420:0xf7fea443 (0xf6d67300, 0x138 bytes, with 2 son(s))
Emitting 56 bytes for 6 x86 bytes ( => ./test05/ + 8)
0xf7fea4c8: FF A3 2C 00 00 00 JMP Ed
0xf6d67500: 14 emited opcodes, state=0/0, set=0, use=0, need=0
e597c02c LDR r12, [r7, #44]
Jump to linker (#0) nolinker=0
e3021d38 MOVW r1, #0x2d38
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0xf7fea4c8:0xf7fea4ce (0xf6d67500, 0x38 bytes, with 0 son(s))
GetDynablocksFromAddress(0xf7968008, 0x2bb79b4) => (nil) (0xcc / 0x53)
Emitting 136 bytes for 12 x86 bytes
0x2bb79b4: Native call to 0x2893edc
0xf6d67600: 19 emited opcodes, state=1/1, set=3F, use=0, need=3F
Native Call to __gmon_start__
e307c9b5 MOVW r12, #0x79b5
e340c2bb MOVT r12, #0x2bb
e8801ff0 STM r0, {r4-r12}
e92d0001 PUSH {r0}
e3063378 MOVW r3, #0x6378
e3403288 MOVT r3, #0x288
e12fff33 BLX r3
e8bd0001 POP {r0}
e8901ff0 LDM r0, {r4-r12}
e30739bf MOVW r3, #0x79bf
e34032bb MOVT r3, #0x2bb
e15c0003 CMP r12, r3
1a000002 BNE +4
e5901358 LDR r1, [r0, #856]
e3510001 CMP r1, #0x1
1a000002 BNE +4
Jump to epilog
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
0x2bb79bf: C3 RET
0xf6d6764c: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (2, 0 sons)
--- DynaRec Block created @0x2bb79b4:0x2bb79c0 (0xf6d67600, 0x88 bytes, with 0 son(s))
0213|0xf7fea43e: Calling __gmon_start__ (00000000, 00000000, F7FEBFC8...) =>__gmon_start__ called (dummy call)
return 0x02BB79B4
Emitting 36 bytes for 9 x86 bytes ( => ./test05/frame_dummy)
0xf7fea870: 55 PUSH reg
0xf6d67700: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea871: 89 E5 MOV Ed, Gd
0xf6d67704: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e1a09008 MOV r9, r8
0xf7fea873: 5D POP reg
0xf6d67708: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e8b80200 LDM r8!, {r9}
----> potential Son here
0xf7fea874: E9 57 FF FF FF JMP Id (=> ./test05/register_tm_clones)
0xf6d6770c: 6 emited opcodes, state=0/0, set=0, use=0, need=0
Jump to linker (#0) nolinker=0
e30ac7d0 MOVW r12, #0xa7d0
e34fc7fe MOVT r12, #0xf7fe
e3031150 MOVW r1, #0x3150
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
---- END OF BLOCK ---- (4, 1 sons)
--- DynaRec Block created @0xf7fea870:0xf7fea879 (0xf6d67700, 0x24 bytes, with 1 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796635c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796635c ? ; <UNDEFINED> instruction: 0xf7fea90b
0xf7966360 ? andeq r0, r0, r1
0xf7966364 ? adcseq r1, r11, #224, 8 ; 0xe0000000
0xf7966368 ? adcseq r1, r11, #200, 16 ; 0xc80000
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fea8e1
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febfc8
0xf7966380 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x00000002 r1 0x00c80001 r2 0x02bc25a8 r3 0xf6d67700 r4 0xf7febec8 r5 0xf79663c0 r6 0x00000000 r7 0xf7febfc8 r8 0xf796635c r9 0x02bb18c8 r10 0x00000001
r11 0x00000000 r12 0xf7fea870 sp 0xfffeee34 lr 0x02893a30 pc 0xf796635c cpsr 0x00000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796635c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 213 name box86 from 0xf796635c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796635c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667592, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667592) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2898
block = 0xf7febec8
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134305680
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27d5a14)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796633c: andeq r0, r0, r0
0xf7966340: andeq r0, r0, r0
0xf7966344: andeq r0, r0, r0
0xf7966348: andeq r0, r0, r0
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: adcseq r1, r11, #200, 16 ; 0xc80000
=> 0xf796635c: ; <UNDEFINED> instruction: 0xf7fea90b
0xf7966360: andeq r0, r0, r1
>>>

─── Output/messages ────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:3EC11A00
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test06
Read 31 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 30)
Loading SymTab (idx = 29)
Loading Dynamic (idx = 22)
Rel Table @0x8048410 (0x8/0x8)
PLT Table @0x8048418 (type=17 0x40/0x8)
The GOT.PLT Table is at address 0x804a000
The GOT Table is at address 0x8049ffc
The .init is at address 0x8048458
The .init_array is at address 0x8049f00, and have 1 elements
The .fini is at address 0x8048814
The .fini_array is at address 0x8049f04, and have 1 elements
The .text is at address 0x8048520, and is 754 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test06" as #0 in elf collection
Elf Addr(v/p)=0x8048000/0x8048000 Memsize=0x2048 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x3000 memory @0x8048000 for Elf "./test06"
Loading block #2 @0x8048000 (0x9d4/0x9d4)
Add ELF eXecutable Memory 0x8048000:0x9d4
addDBFromAddressRange 0x8048000 -> 0x80489d3
Loading block #3 @0x8049f00 (0x13c/0x148)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Already present in maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test06...
Applying 1 Relocation(s) for ./test06
PLT Resolver injected in plt.got at 0x804a008
Applying 8 PLT Relocation(s) for ./test06
Entry Point is 0x8048520
Start x86emu on Main
Run X86 (0x2bb42d8), EIP=0x8048520, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb52e0, Slot=40 Return=0x8048541: elf is ./test06
PltReolver: Apply Global R_386_JMP_SLOT @0x804a020 with sym=__libc_start_main (0x80484e6 -> 0x2bba8b5 / (noelf))
return 0x00000001
0224|0x8048541: Calling __libc_start_main (080486CC, 00000001, F79663C0...) =>Calling init(0x80487b0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0x80487b0) => 0x2bb7660 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test06/__libc_csu_init)
0x80487b0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0x80487b1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0x80487b2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0x80487b3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0x80487b4: E8 97 FD FF FF CALL Id (=> ./test06/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30877b9 MOVW r7, #0x87b9
e3407804 MOVT r7, #0x804
0x80487b9: 81 C3 47 18 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013847 MOVW r3, #0x1847
e0877003 ADD r7, r7, r3
0x80487bf: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0x80487c2: 8B 6C 24 20 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989020 LDR r9, [r8, #32]
0x80487c6: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0x80487cc: E8 87 FC FF FF CALL Id (=> ./test06/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0x80487d1/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30827d1 MOVW r2, #0x87d1
e3402804 MOVT r2, #0x804
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e308c458 MOVW r12, #0x8458
e340c804 MOVT r12, #0x804
e3041798 MOVW r1, #0x4798
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0x80487d1: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0x80487d7: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0x80487d9: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0x80487dc: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x80487de: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0x80487e0: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0x80487e2: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0x80487e8: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0x80487eb: FF 74 24 2C PUSH Ed
0xf6d670b4: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0x80487ef: FF 74 24 2C PUSH Ed
0xf6d670bc: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0x80487f3: 55 PUSH reg
0xf6d670c4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
----> potential Son here
0x80487f4: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0x80487fb/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30827fb MOVW r2, #0x87fb
e3402804 MOVT r2, #0x804
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30417a8 MOVW r1, #0x47a8
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0x80487fb: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0x80487fe: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0x8048801: 39 F7 CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05b300a SUBS r3, r11, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x8048803: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0x8048805: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0x8048808: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0x8048809: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0x804880a: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0x804880b: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0x804880c: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0x80487b0:0x804880d (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0x80487b0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb42d8
Emitting 340 bytes for 35 x86 bytes ( => ./test06/)
0x8048458: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0x8048459: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0x804845c: E8 EF 00 00 00 CALL Id (=> ./test06/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e3087461 MOVW r7, #0x8461
e3407804 MOVT r7, #0x804
0x8048461: 81 C3 9F 1B 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013b9f MOVW r3, #0x1b9f
e0877003 ADD r7, r7, r3
0x8048467: 8B 83 FC FF FF FF MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5174004 LDR r4, [r7, #-4]
0x804846d: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x804846f: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00001a BEQ +28
----> potential Son here
0x8048471: E8 9A 00 00 00 CALL Id (=> ./test06/)
0xf6d6733c: 27 emited opcodes, state=1/0, set=3F, use=0, need=0
e3082476 MOVW r2, #0x8476
e3402804 MOVT r2, #0x804
e9280004 STMDB r8!, {r2}
Native Call to __gmon_start__ (retn=0)
e30ac861 MOVW r12, #0xa861
e340c2bb MOVT r12, #0x2bb
e8801ff0 STM r0, {r4-r12}
e92d0001 PUSH {r0}
e3063378 MOVW r3, #0x6378
e3403288 MOVT r3, #0x288
e12fff33 BLX r3
e8bd0001 POP {r0}
e8901ff0 LDM r0, {r4-r12}
e30a386b MOVW r3, #0xa86b
e34032bb MOVT r3, #0x2bb
e15c0003 CMP r12, r3
1a000007 BNE +9
e8b81000 LDM r8!, {r12}
e3083476 MOVW r3, #0x8476
e3403804 MOVT r3, #0x804
e15c0003 CMP r12, r3
1a000002 BNE +4
e5901358 LDR r1, [r0, #856]
e3510001 CMP r1, #0x1
1a000002 BNE +4
Jump to epilog
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
----> potential Son here
0x8048476: 83 C4 08 ADD Ed, Ib
0xf6d673a8: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0x8048479: 5B POP reg
0xf6d67414: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0x804847a: C3 RET
0xf6d67418: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0x8048458:0x804847b (0xf6d67300, 0x154 bytes, with 2 son(s))
0224|0x8048476: Calling __gmon_start__ (00000000, 00000000, 0804A000...) =>__gmon_start__ called (dummy call)
return 0x02BBA860
Extend block 0xfffeec34, 0x80485fd -> 0x8048600 (ninst=4)
Emitting 308 bytes for 43 x86 bytes ( => ./test06/frame_dummy)
0x80485f0: B8 08 9F 04 08 MOV Reg, Id
0xf6d67500: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3094f08 MOVW r4, #0x9f08
e3404804 MOVT r4, #0x804
0x80485f5: 8B 10 MOV Gd, Ed
0xf6d67508: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e5946000 LDR r6, [r4, #0]
0x80485f7: 85 D2 TEST Ed, Gd
0xf6d6750c: 7 emited opcodes, state=1/0, set=3F, use=0, need=1008
e300c000 MOVW r12, #0x0
e300302d MOVW r3, #0x2d
e58032fc STR r3, [r0, #764]
e0163006 ANDS r3, r6, r6
e5803308 STR r3, [r0, #776]
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x80485f9: 75 05 JNZ ib
0xf6d67528: 3 emited opcodes, state=0/1, set=0, use=8, need=1000
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1a000005 BNE +7
----> potential Son here
0x80485fb: EB 93 JMP Ib
0xf6d67534: 6 emited opcodes, state=0/0, set=0, use=0, need=1000
Jump to linker (#0) nolinker=0
e308c590 MOVW r12, #0x8590
e340c804 MOVT r12, #0x804
e3031ea8 MOVW r1, #0x3ea8
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
0x80485fd: 8D 76 00 LEA Gd, Ed
0xf6d6754c: 0 emited opcodes, state=0/0, set=0, use=0, need=0
----> potential Son here
0x8048600: BA 00 00 00 00 MOV Reg, Id
0xf6d6754c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e3006000 MOVW r6, #0x0
0x8048605: 85 D2 TEST Ed, Gd
0xf6d67550: 7 emited opcodes, state=1/0, set=3F, use=0, need=1008
e300c000 MOVW r12, #0x0
e300302d MOVW r3, #0x2d
e58032fc STR r3, [r0, #764]
e0163006 ANDS r3, r6, r6
e5803308 STR r3, [r0, #776]
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x8048607: 74 F2 JZ ib
0xf6d6756c: 3 emited opcodes, state=0/1, set=0, use=8, need=1000
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0affffee BEQ -16
0x8048609: 55 PUSH reg
0xf6d67578: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0x804860a: 89 E5 MOV Ed, Gd
0xf6d6757c: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e1a09008 MOV r9, r8
0x804860c: 83 EC 14 SUB Ed, Ib
0xf6d67580: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2488014 SUB r8, r8, #0x14
0x804860f: 50 PUSH reg
0xf6d67584: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280010 STMDB r8!, {r4}
----> potential Son here
0x8048610: FF D2 CALL Ed
0xf6d67588: 28 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0x8048612/0xf6d675f8-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3082612 MOVW r2, #0x8612
e3402804 MOVT r2, #0x804
e30735f8 MOVW r3, #0x75f8
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e1a0c006 MOV r12, r6
e3031eb8 MOVW r1, #0x3eb8
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0x8048612: 83 C4 10 ADD Ed, Ib
0xf6d675f8: 7 emited opcodes, state=1/0, set=3F, use=0, need=1000
e3003010 MOVW r3, #0x10
e5808300 STR r8, [r0, #768]
e5803304 STR r3, [r0, #772]
e300c003 MOVW r12, #0x3
e580c2fc STR r12, [r0, #764]
e2888010 ADD r8, r8, #0x10
e5808308 STR r8, [r0, #776]
0x8048615: C9 LEAVE
0xf6d67614: 2 emited opcodes, state=0/1, set=0, use=0, need=1000
e1a08009 MOV r8, r9
e8b80200 LDM r8!, {r9}
----> potential Son here
0x8048616: E9 75 FF FF FF JMP Id (=> ./test06/register_tm_clones)
0xf6d6761c: 6 emited opcodes, state=0/0, set=0, use=0, need=1000
Jump to linker (#8) nolinker=0
e308c590 MOVW r12, #0x8590
e340c804 MOVT r12, #0x804
e3031ec8 MOVW r1, #0x3ec8
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
---- END OF BLOCK ---- (17, 5 sons)
--- DynaRec Block created @0x80485f0:0x804861b (0xf6d67500, 0x134 bytes, with 5 son(s))
Emitting 320 bytes for 53 x86 bytes ( => ./test06/register_tm_clones)
0x8048590: B8 3C A0 04 08 MOV Reg, Id
0xf6d67700: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e30a403c MOVW r4, #0xa03c
e3404804 MOVT r4, #0x804
0x8048595: 2D 3C A0 04 08 SUB EAX, Id
0xf6d67708: 3 emited opcodes, state=1/0, set=3F, use=0, need=0
e30a303c MOVW r3, #0xa03c
e3403804 MOVT r3, #0x804
e0444003 SUB r4, r4, r3
0x804859a: C1 F8 02 SAR Ed, Ib
0xf6d67714: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a04144 ASR r4, r4, #0x2
0x804859d: 89 C2 MOV Ed, Gd
0xf6d67718: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e1a06004 MOV r6, r4
0x804859f: C1 EA 1F SHR Ed, Ib
0xf6d6771c: 1 emited opcodes, state=1/1, set=3B, use=0, need=0
e1a06fa6 LSR r6, r6, #0x1f
0x80485a2: 01 D0 ADD Ed, Gd
0xf6d67720: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e0844006 ADD r4, r4, r6
0x80485a4: D1 F8 SAR Ed, 1
0xf6d67724: 6 emited opcodes, state=1/1, set=1B, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e1b040c4 ASRS r4, r4, #0x1
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
0x80485a6: 74 1B JZ ib
0xf6d6773c: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002e BEQ +48
0x80485a8: BA 00 00 00 00 MOV Reg, Id
0xf6d67748: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e3006000 MOVW r6, #0x0
0x80485ad: 85 D2 TEST Ed, Gd
0xf6d6774c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0163006 ANDS r3, r6, r6
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x80485af: 74 12 JZ ib
0xf6d67760: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000025 BEQ +39
0x80485b1: 55 PUSH reg
0xf6d6776c: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0x80485b2: 89 E5 MOV Ed, Gd
0xf6d67770: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e1a09008 MOV r9, r8
0x80485b4: 83 EC 10 SUB Ed, Ib
0xf6d67774: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2488010 SUB r8, r8, #0x10
0x80485b7: 50 PUSH reg
0xf6d67778: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280010 STMDB r8!, {r4}
0x80485b8: 68 3C A0 04 08 PUSH Id
0xf6d6777c: 3 emited opcodes, state=0/1, set=0, use=0, need=0
e30a303c MOVW r3, #0xa03c
e3403804 MOVT r3, #0x804
e9280008 STMDB r8!, {r3}
----> potential Son here
0x80485bd: FF D2 CALL Ed
0xf6d67788: 28 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0x80485bf/0xf6d677f8-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30825bf MOVW r2, #0x85bf
e3402804 MOVT r2, #0x804
e30737f8 MOVW r3, #0x77f8
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e1a0c006 MOV r12, r6
e3031f70 MOVW r1, #0x3f70
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0x80485bf: 83 C4 10 ADD Ed, Ib
0xf6d677f8: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0x80485c2: C9 LEAVE
0xf6d677fc: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e1a08009 MOV r8, r9
e8b80200 LDM r8!, {r9}
----> potential Son here
0x80485c3: F3 C3 (REPZ) RET
0xf6d67804: 15 emited opcodes, state=1/0, set=3F, use=0, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (20, 3 sons)
--- DynaRec Block created @0x8048590:0x80485c5 (0xf6d67700, 0x140 bytes, with 3 son(s))
GetDynablocksFromAddress(0xf7968008, 0x2baafa4) => (nil) (0xcc / 0x53)
Emitting 40 bytes for 7 x86 bytes
0x2baafa4: Exit x86emu
0xf6d67900: 5 emited opcodes, state=1/1, set=3F, use=0, need=3F
Exit x86 Emu
e30acfa7 MOVW r12, #0xafa7
e340c2ba MOVT r12, #0x2ba
e8801ff0 STM r0, {r4-r12}
e3001001 MOVW r1, #0x1
e5801358 STR r1, [r0, #856]
Jump to epilog
e30acfa4 MOVW r12, #0xafa4
e340c2ba MOVT r12, #0x2ba
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0x2baafa4:0x2baafab (0xf6d67900, 0x28 bytes, with 0 son(s))
Running DynaRec Block @0x2baafa4 (0xf6d67900) of 1 x86 insts (nolinker=0, father=(nil)) emu=0x2bb42d8

Program received signal SIGILL, Illegal instruction.
0xf79663b8 in ?? ()
─── Assembly ───────────────────────────────────────────────────────────────────
0xf79663b8 ? ; <UNDEFINED> instruction: 0xf79663bc
0xf79663bc ? andeq r0, r0, r1
0xf79663c0 ? ; <UNDEFINED> instruction: 0xf79664fa
0xf79663c4 ? andeq r0, r0, r0
0xf79663c8 ? ; <UNDEFINED> instruction: 0xf7966503
0xf79663cc ? ; <UNDEFINED> instruction: 0xf7966513
0xf79663d0 ? ; <UNDEFINED> instruction: 0xf796652f
0xf79663d4 ? ; <UNDEFINED> instruction: 0xf796653f
0xf79663d8 ? ; <UNDEFINED> instruction: 0xf7966567
0xf79663dc ? ; <UNDEFINED> instruction: 0xf7966593
─── Breakpoints ────────────────────────────────────────────────────────────────
─── Expressions ────────────────────────────────────────────────────────────────
─── History ────────────────────────────────────────────────────────────────────
─── Memory ─────────────────────────────────────────────────────────────────────
─── Registers ──────────────────────────────────────────────────────────────────
r0 0x00000000 r1 0x02bb42d9 r2 0x000000e1 r3 0x00000000
r4 0x08049f08 r5 0xf79663c0 r6 0x00000000 r7 0x02bb20e0
r8 0xf7966390 r9 0x00000000 r10 0x00000001 r11 0x00000000
r12 0x00000000 sp 0xfffeee34 lr 0x02893d88 pc 0xf79663b8
cpsr 0x00000010 fpscr 0x00000010
─── Source ─────────────────────────────────────────────────────────────────────
─── Stack ──────────────────────────────────────────────────────────────────────
[0] from 0xf79663b8
[1] from 0x02893d88 in DynaRun+200 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:173
[2] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[3] from 0x00000000
─── Threads ────────────────────────────────────────────────────────────────────
[1] id 224 name box86 from 0xf79663b8
─── Variables ──────────────────────────────────────────────────────────────────
────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf79663b8 in ?? ()
No symbol table info available.
#1 0x02893d88 in DynaRun (emu=0x8049f08) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:173
block = 0x0
current = 0x2afa948
#2 0x02881694 in Run660F (emu=0x2881694 <my___libc_start_main>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = 0
ip = 42548615
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = 0 '\000'
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 17864475219997768560, [1] = 196650437812372184},
sq = {[0] = -582268853711783056, [1] = 196650437812372184},
d = {[0] = -4.5178227274518742e+269, [1] = 1.6295305506270651e-295},
f = {[0] = 2.76582327e-37, [1] = -9.54755808e+33, [2] = 2.75155469e-37, [3] = 2.742468e-37},
ud = {[0] = 45890416, [1] = 4159397264, [2] = 45826776, [3] = 45786248},
sd = {[0] = 45890416, [1] = -135570032, [2] = 45826776, [3] = 45786248},
uw = {[0] = 15216, [1] = 700, [2] = 23952, [3] = 63467, [4] = 17112, [5] = 699, [6] = 42120, [7] = 698},
sw = {[0] = 15216, [1] = 700, [2] = 23952, [3] = -2069, [4] = 17112, [5] = 699, [6] = -23416, [7] = 698},
ub = "p;\274\002\220]\353\367\330B\273\002\210\244\272\002",
sb = "p;\274\002\220]\353\367\330B\273\002\210\244\272\002"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#3 0x00000000 in ?? ()
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf7966398: adcseq r2, r11, #200, 8 ; 0xc8000000
0xf796639c: stmdaeq r4, {r0, r6, r8, r10, pc}
0xf79663a0: stmdaeq r4, {r2, r3, r6, r7, r9, r10, pc}
0xf79663a4: andeq r0, r0, r1
0xf79663a8: ; <UNDEFINED> instruction: 0xf79663c0
0xf79663ac: stmdaeq r4, {r4, r5, r7, r8, r9, r10, pc}
0xf79663b0: stmdaeq r4, {r4, r11, pc}
0xf79663b4: andeq r0, r0, r0
=> 0xf79663b8: ; <UNDEFINED> instruction: 0xf79663bc
0xf79663bc: andeq r0, r0, r1
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:009F8F59
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test07
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x32c (0x40/0x8)
PLT Table @0x36c (type=17 0x10/0x8)
The GOT Table is at address 0x1fd8
The .init is at address 0x37c
The .init_array is at address 0x1ed8, and have 1 elements
The .fini is at address 0x604
The .fini_array is at address 0x1edc, and have 1 elements
The .text is at address 0x3e0, and is 546 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test07" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x200c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x200c memory @(nil) for Elf "./test07"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0x788/0x788)
Add ELF eXecutable Memory 0xf7fea000:0x788
addDBFromAddressRange 0xf7fea000 -> 0xf7fea787
Loading block #3 @0xf7febed8 (0x130/0x134)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test07...
Applying 8 Relocation(s) for ./test07
PLT Resolver injected in plt.got at 0xf7febfe0
Applying 2 PLT Relocation(s) for ./test07
Entry Point is 0xf7fea3e0
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea3e0, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=8 Return=0xf7fea411: elf is ./test07
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfe8 with sym=__libc_start_main (0xf7fea3c6 -> 0x2bb78f9 / (noelf))
return 0xF7FEA5A0
0230|0xf7fea411: Calling __libc_start_main (F7FEA51D, 00000001, F79663C0...) =>Calling init(0xf7fea5a0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea5a0) => 0x2bb67f8 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test07/__libc_csu_init)
0xf7fea5a0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea5a1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea5a2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea5a3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea5a4: E8 77 FE FF FF CALL Id (=> ./test07/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a75a9 MOVW r7, #0xa5a9
e34f77fe MOVT r7, #0xf7fe
0xf7fea5a9: 81 C3 2F 1A 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013a2f MOVW r3, #0x1a2f
e0877003 ADD r7, r7, r3
0xf7fea5af: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea5b2: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea5b6: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea5bc: E8 BB FD FF FF CALL Id (=> ./test07/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea5c1/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a25c1 MOVW r2, #0xa5c1
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac37c MOVW r12, #0xa37c
e34fc7fe MOVT r12, #0xf7fe
e30213f0 MOVW r1, #0x23f0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea5c1: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea5c7: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea5c9: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea5cc: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea5ce: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea5d0: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea5d2: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea5d8: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea5db: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea5dc: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea5e0: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea5e4: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea5eb/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a25eb MOVW r2, #0xa5eb
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e3021400 MOVW r1, #0x2400
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea5eb: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea5ee: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea5f1: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea5f3: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea5f5: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea5f8: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea5f9: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea5fa: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea5fb: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea5fc: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea5a0:0xf7fea5fd (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea5a0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test07/)
0xf7fea37c: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea37d: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea380: E8 9B 00 00 00 CALL Id (=> ./test07/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7385 MOVW r7, #0xa385
e34f77fe MOVT r7, #0xf7fe
0xf7fea385: 81 C3 53 1C 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013c53 MOVW r3, #0x1c53
e0877003 ADD r7, r7, r3
0xf7fea38b: 8B 83 1C 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e597401c LDR r4, [r7, #28]
0xf7fea391: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea393: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea395: E8 3E 00 00 00 CALL Id (=> ./test07/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea39a/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a239a MOVW r2, #0xa39a
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac3d8 MOVW r12, #0xa3d8
e34fc7fe MOVT r12, #0xf7fe
e3021760 MOVW r1, #0x2760
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea39a: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea39d: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea39e: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea37c:0xf7fea39f (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796636c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fea5c1
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febfd8
0xf7966380 ? andeq r0, r0, r1
0xf7966384 ? andeq r0, r0, r0
0xf7966388 ? andeq r0, r0, r0
0xf796638c ? adcseq r10, r10, #164, 30 ; 0x290
0xf7966390 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0xeffd7db9 r1 0x05775ac8 r2 0x02bc23f0 r3 0xf6d67300 r4 0xf7fea5a0 r5 0xf79663c0 r6 0x00000000 r7 0xf7febfd8 r8 0xf796636c r9 0x02bb18c8 r10 0xf7febedc
r11 0x00000000 r12 0xf7fea37c sp 0xfffeee34 lr 0x02893a30 pc 0xf796636c cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796636c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 230 name box86 from 0xf796636c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796636c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667608, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667608) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2648
block = 0xf7fea5a0
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134306948
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27d3274)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: andeq r0, r0, r0
0xf796635c: andeq r0, r0, r0
0xf7966360: andeq r0, r0, r0
0xf7966364: andeq r0, r0, r0
0xf7966368: andeq r0, r0, r0
=> 0xf796636c: ; <UNDEFINED> instruction: 0xf7fea5c1
0xf7966370: andeq r0, r0, r0
>>>
 
So, for that gdb trace, some background information first:
I suspect something wrong in the call of the Asm function arm_tableupdate. So to check what's going on, a step by step progress in gdb seems the only viable solution. In gdb you don't need to type the full name of the command, as little lettre as it can is enough (i.e. enough lettres to not have ambiguity between 2 commands).
There are 2 type of steps in gdb: "step" or "s" to single step each line of code, and "next" or "n" that will go the the next line of code. Basicaly the difference between the 2 is that next will not follow function call, and let them execute.
next and step operates on source level. But here, because of the optimisation and the assembly, we will need to operate at the asm level. So you need to use "stepi" or "si" and "nexti" or "ni", that work the same way, but on assembly.

So first, in gdb, you need to put a breakpoint, wi will stop in dynarec.c, line 87.
the code is like that
Code: 
    dynablock_t *father = block->father?block->father:block;
    if(!block->parent->nolinker || (current && father->marks)) {
        //dynarec_log(LOG_DEBUG, "--- Linking %p/%p to %p (table=%p[%p/%p/%p/%p])\n", block, block->block, current, table, table[0], table[1], table[2], table[3]);
        // only update block if linker is allowed or if marks is possibe
        if(current && father->marks && current!=father)
            AddMark(current, father, table);
        tableupdate(block->block, addr, table);
    }
    return block->block;
with the line 87 beeing "tableupdate(block->block, addr, table);"
to type "b dynarec.c:87" to set the breakpoint
then let it run with "r"
it will stop at this line. so here, I think it's safer to sure "si" to step in the assembly code, instead of simply "s", because the function is inline and I'm not sure it will enter the function with step.
That table_update function is:
Code: 
void tableupdate(void* jumpto, uintptr_t ref, void** table)
{
    #ifdef ARM
    if(arm_tableupdate(jumpto, ref, table))
    #endif
    {
        table[0] = jumpto;
        table[1] = (void*)ref;
    }
}
Because ARM is defined, you should rapidly enter 'arm_tableupdate"
Pay attention when you jump there, because I suspect it may go wrong at this place
The arm_tableupdate function look like this
Code: 
.global arm_tableupdate
arm_tableupdate:
    // jump address is r0 and IP address is r1
    // table offset is r2
    push    {r4, r5}
    ldrexd  r4, r5, [r2]
    strexd  r3, r0, r1, [r2]
    pop     {r4, r5}
    mov     r0, r3
    bx      lr
That's arm assembly code, and doesn't do much, but I don't really like the ASM writing in gcc, so I prefer using .S file.
follow all you can with "si" and at some point, you should jump in 0xf5cdf000 or maybe before...
The point would be to see where that eroneous jump occured!
Good luck, and have fun with gdb :)
Post automatically merged:

Also, the program used for debugging doesn't mater much here, they all do the same.
Also, I don't think all the traces are still usefull, but you can keep them in case not having them change a bit the behavior.
 
Tests 8 through 14.

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:00EFF4BA
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test08
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x388 (0x40/0x8)
PLT Table @0x3c8 (type=17 0x18/0x8)
The GOT Table is at address 0x1fd4
The .init is at address 0x3e0
The .init_array is at address 0x1ed4, and have 1 elements
The .fini is at address 0x774
The .fini_array is at address 0x1ed8, and have 1 elements
The .text is at address 0x460, and is 788 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test08" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x200c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x200c memory @(nil) for Elf "./test08"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0x908/0x908)
Add ELF eXecutable Memory 0xf7fea000:0x908
addDBFromAddressRange 0xf7fea000 -> 0xf7fea907
Loading block #3 @0xf7febed4 (0x134/0x138)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test08...
Applying 8 Relocation(s) for ./test08
PLT Resolver injected in plt.got at 0xf7febfdc
Applying 3 PLT Relocation(s) for ./test08
Entry Point is 0xf7fea5a5
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea5a5, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=8 Return=0xf7fea5d6: elf is ./test08
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfe4 with sym=__libc_start_main (0xf7fea436 -> 0x2bb7991 / (noelf))
return 0xF7FEA6F0
0235|0xf7fea5d6: Calling __libc_start_main (F7FEA460, 00000001, F79663C0...) =>Calling init(0xf7fea6f0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea6f0) => 0x2bb6890 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test08/__libc_csu_init)
0xf7fea6f0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea6f1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea6f2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea6f3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea6f4: E8 E7 FE FF FF CALL Id (=> ./test08/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a76f9 MOVW r7, #0xa6f9
e34f77fe MOVT r7, #0xf7fe
0xf7fea6f9: 81 C3 DB 18 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e30138db MOVW r3, #0x18db
e0877003 ADD r7, r7, r3
0xf7fea6ff: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea702: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea706: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea70c: E8 CF FC FF FF CALL Id (=> ./test08/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea711/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a2711 MOVW r2, #0xa711
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac3e0 MOVW r12, #0xa3e0
e34fc7fe MOVT r12, #0xf7fe
e3021520 MOVW r1, #0x2520
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea711: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea717: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea719: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea71c: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea71e: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea720: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea722: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea728: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea72b: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea72c: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea730: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea734: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea73b/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a273b MOVW r2, #0xa73b
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e3021530 MOVW r1, #0x2530
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea73b: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea73e: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea741: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea743: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea745: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea748: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea749: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea74a: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea74b: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea74c: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea6f0:0xf7fea74d (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea6f0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test08/)
0xf7fea3e0: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea3e1: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea3e4: E8 F7 01 00 00 CALL Id (=> ./test08/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a73e9 MOVW r7, #0xa3e9
e34f77fe MOVT r7, #0xf7fe
0xf7fea3e9: 81 C3 EB 1B 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013beb MOVW r3, #0x1beb
e0877003 ADD r7, r7, r3
0xf7fea3ef: 8B 83 20 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5974020 LDR r4, [r7, #32]
0xf7fea3f5: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea3f7: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea3f9: E8 5A 00 00 00 CALL Id (=> ./test08/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea3fe/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a23fe MOVW r2, #0xa3fe
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac458 MOVW r12, #0xa458
e34fc7fe MOVT r12, #0xf7fe
e30214e8 MOVW r1, #0x24e8
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea3fe: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea401: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea402: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea3e0:0xf7fea403 (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796636c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fea711
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febfd4
0xf7966380 ? andeq r0, r0, r1
0xf7966384 ? andeq r0, r0, r0
0xf7966388 ? andeq r0, r0, r0
0xf796638c ? adcseq r10, r10, #164, 30 ; 0x290
0xf7966390 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0xeffd7db1 r1 0x05775bf8 r2 0x02bc2520 r3 0xf6d67300 r4 0xf7fea6f0 r5 0xf79663c0 r6 0x00000000 r7 0xf7febfd4 r8 0xf796636c r9 0x02bb18c8 r10 0xf7febed8
r11 0x00000000 r12 0xf7fea3e0 sp 0xfffeee34 lr 0x02893a30 pc 0xf796636c cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796636c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 235 name box86 from 0xf796636c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796636c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667604, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667604) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc27e0
block = 0xf7fea6f0
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134306848
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27d3594)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: andeq r0, r0, r0
0xf796635c: andeq r0, r0, r0
0xf7966360: andeq r0, r0, r0
0xf7966364: andeq r0, r0, r0
0xf7966368: andeq r0, r0, r0
=> 0xf796636c: ; <UNDEFINED> instruction: 0xf7fea711
0xf7966370: andeq r0, r0, r0
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:CEB3003D
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test09
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x35c (0x40/0x8)
PLT Table @0x39c (type=17 0x20/0x8)
The GOT Table is at address 0x1fd0
The .init is at address 0x3bc
The .init_array is at address 0x1ed0, and have 1 elements
The .fini is at address 0x684
The .fini_array is at address 0x1ed4, and have 1 elements
The .text is at address 0x440, and is 578 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test09" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x200c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x200c memory @(nil) for Elf "./test09"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0x824/0x824)
Add ELF eXecutable Memory 0xf7fea000:0x824
addDBFromAddressRange 0xf7fea000 -> 0xf7fea823
Loading block #3 @0xf7febed0 (0x138/0x13c)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test09...
Applying 8 Relocation(s) for ./test09
PLT Resolver injected in plt.got at 0xf7febfd8
Applying 4 PLT Relocation(s) for ./test09
Entry Point is 0xf7fea440
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea440, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=16 Return=0xf7fea471: elf is ./test09
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfe4 with sym=__libc_start_main (0xf7fea416 -> 0x2bb7992 / (noelf))
return 0xF7FEA620
0240|0xf7fea471: Calling __libc_start_main (F7FEA5E9, 00000001, F79663C0...) =>Calling init(0xf7fea620) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea620) => 0x2bb6880 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test09/__libc_csu_init)
0xf7fea620: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea621: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea622: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea623: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea624: E8 57 FE FF FF CALL Id (=> ./test09/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7629 MOVW r7, #0xa629
e34f77fe MOVT r7, #0xf7fe
0xf7fea629: 81 C3 A7 19 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e30139a7 MOVW r3, #0x19a7
e0877003 ADD r7, r7, r3
0xf7fea62f: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea632: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea636: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea63c: E8 7B FD FF FF CALL Id (=> ./test09/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea641/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a2641 MOVW r2, #0xa641
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac3bc MOVW r12, #0xa3bc
e34fc7fe MOVT r12, #0xf7fe
e3021510 MOVW r1, #0x2510
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea641: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea647: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea649: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea64c: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea64e: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea650: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea652: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea658: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea65b: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea65c: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea660: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea664: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea66b/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a266b MOVW r2, #0xa66b
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e3021520 MOVW r1, #0x2520
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea66b: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea66e: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea671: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea673: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea675: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea678: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea679: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea67a: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea67b: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea67c: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea620:0xf7fea67d (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea620 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test09/)
0xf7fea3bc: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea3bd: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea3c0: E8 BB 00 00 00 CALL Id (=> ./test09/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a73c5 MOVW r7, #0xa3c5
e34f77fe MOVT r7, #0xf7fe
0xf7fea3c5: 81 C3 0B 1C 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013c0b MOVW r3, #0x1c0b
e0877003 ADD r7, r7, r3
0xf7fea3cb: 8B 83 24 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5974024 LDR r4, [r7, #36]
0xf7fea3d1: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea3d3: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea3d5: E8 5E 00 00 00 CALL Id (=> ./test09/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea3da/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a23da MOVW r2, #0xa3da
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac438 MOVW r12, #0xa438
e34fc7fe MOVT r12, #0xf7fe
e30214d8 MOVW r1, #0x24d8
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea3da: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea3dd: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea3de: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea3bc:0xf7fea3df (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796636c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fea641
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febfd0
0xf7966380 ? andeq r0, r0, r1
0xf7966384 ? andeq r0, r0, r0
0xf7966388 ? andeq r0, r0, r0
0xf796638c ? adcseq r10, r10, #164, 30 ; 0x290
0xf7966390 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0xeffd7da9 r1 0x05775be8 r2 0x02bc2510 r3 0xf6d67300 r4 0xf7fea620 r5 0xf79663c0 r6 0x00000000 r7 0xf7febfd0 r8 0xf796636c r9 0x02bb18c8 r10 0xf7febed4
r11 0x00000000 r12 0xf7fea3bc sp 0xfffeee34 lr 0x02893a30 pc 0xf796636c cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796636c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 240 name box86 from 0xf796636c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796636c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667600, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667600) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2800
block = 0xf7fea620
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134306884
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27d3474)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: andeq r0, r0, r0
0xf796635c: andeq r0, r0, r0
0xf7966360: andeq r0, r0, r0
0xf7966364: andeq r0, r0, r0
0xf7966368: andeq r0, r0, r0
=> 0xf796636c: ; <UNDEFINED> instruction: 0xf7fea641
0xf7966370: andeq r0, r0, r0
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:8204009A
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test10
Read 32 Section header
Read 9 Program header
Loading Sections Table String (idx = 31)
Loading SymTab Strings (idx = 30)
Loading SymTab (idx = 29)
Loading Dynamic (idx = 24)
Rel Table @0x8d8 (0x158/0x8)
PLT Table @0xa30 (type=17 0x78/0x8)
The GOT Table is at address 0x2f8c
The .init is at address 0xaa8
The .init_array is at address 0x2dec, and have 2 elements
The .fini is at address 0x15a4
The .fini_array is at address 0x2df4, and have 1 elements
The .text is at address 0xbe0, and is 2500 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test10" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x311c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x311c memory @(nil) for Elf "./test10"
Got 0xf7fe9000 (delta=0xf7fe9000)
Loading block #2 @0xf7fe9000 (0x1c72/0x1c72)
Add ELF eXecutable Memory 0xf7fe9000:0x1c72
addDBFromAddressRange 0xf7fe9000 -> 0xf7feac71
Loading block #3 @0xf7febdec (0x220/0x330)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libstdc++.so.6" to maplib
Trying to load "libstdc++.so.6"
Simplified name is "libstdc++.so.6"
Read 32 Section header
Read 8 Program header
Loading Sections Table String (idx = 31)
Loading SymTab Strings (idx = 0)
Loading SymTab (idx = 0)
Loading Dynamic (idx = 24)
Rel Table @0x61ae0 (0x7990/0x8)
PLT Table @0x69470 (type=17 0x1a10/0x8)
The GOT.PLT Table is at address 0x182000
The GOT Table is at address 0x181754
The .init is at address 0x6ae80
The .init_array is at address 0x17ceb0, and have 11 elements
The .fini is at address 0x12bcf4
The .fini_array is at address 0x17cedc, and have 1 elements
The .text is at address 0x6e3a0, and is 776532 big
Loading DynSym Strings (idx = 4)
Loading DynSym (idx = 3)
Adding "/lib/i386-linux-gnu/libstdc++.so.6" as #1 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x185038 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=16 (align=4)
Allocating 0x185038 memory @(nil) for Elf "/lib/i386-linux-gnu/libstdc++.so.6"
Got 0xf6fa0000 (delta=0xf6fa0000)
Loading block #0 @0xf6fa0000 (0x17b8e4/0x17b8e4)
Add ELF eXecutable Memory 0xf6fa0000:0x17b8e4
addDBFromAddressRange 0xf6fa0000 -> 0xf711b8e3
Loading block #1 @0xf711ceb0 (0x5f3c/0x8188)
Loading TLS block #4 @0x2bd14f0 (0x0/0x10)
Using emulated /lib/i386-linux-gnu/libstdc++.so.6
Trying to add "libm.so.6" to maplib
Trying to load "libm.so.6"
Simplified name is "libm.so.6"
Using native(wrapped) libm.so.6
Created lib and added to maplib => success
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
Trying to add "ld-linux.so.2" to maplib
Already present in maplib => success
Trying to add "libgcc_s.so.1" to maplib
Trying to load "libgcc_s.so.1"
Simplified name is "libgcc_s.so.1"
Read 27 Section header
Read 7 Program header
Loading Sections Table String (idx = 26)
Loading SymTab Strings (idx = 0)
Loading SymTab (idx = 0)
Loading Dynamic (idx = 20)
Rel Table @0x1c3c (0x50/0x8)
PLT Table @0x1c8c (type=17 0x148/0x8)
The GOT.PLT Table is at address 0x1d000
The GOT Table is at address 0x1cfe8
The .init is at address 0x1dd4
The .init_array is at address 0x1cee4, and have 2 elements
The .fini is at address 0x17798
The .fini_array is at address 0x1ceec, and have 1 elements
The .text is at address 0x20b0, and is 87781 big
Loading DynSym Strings (idx = 4)
Loading DynSym (idx = 3)
Adding "/lib/i386-linux-gnu/libgcc_s.so.1" as #2 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x1d238 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x1d238 memory @(nil) for Elf "/lib/i386-linux-gnu/libgcc_s.so.1"
Got 0xf6f82000 (delta=0xf6f82000)
Loading block #0 @0xf6f82000 (0x1b64c/0x1b64c)
Add ELF eXecutable Memory 0xf6f82000:0x1b64c
addDBFromAddressRange 0xf6f82000 -> 0xf6f9d64b
Loading block #1 @0xf6f9eee4 (0x1dc/0x354)
Using emulated /lib/i386-linux-gnu/libgcc_s.so.1
Trying to add "libc.so.6" to maplib
Already present in maplib => success
Applying 10 Relocation(s) for /lib/i386-linux-gnu/libgcc_s.so.1
PLT Resolver injected in plt.got at 0xf6f9f008
Applying 41 PLT Relocation(s) for /lib/i386-linux-gnu/libgcc_s.so.1
Created lib and added to maplib => success
Applying 3890 Relocation(s) for /lib/i386-linux-gnu/libstdc++.so.6
PLT Resolver injected in plt.got at 0xf7122008
Applying 834 PLT Relocation(s) for /lib/i386-linux-gnu/libstdc++.so.6
Created lib and added to maplib => success
Trying to add "libgcc_s.so.1" to maplib
Already present in maplib => success
Trying to add "libpthread.so.0" to maplib
Already present in maplib => success
Trying to add "libc.so.6" to maplib
Already present in maplib => success
And now export symbols / relocation for ./test10...
Applying 43 Relocation(s) for ./test10
PLT Resolver injected in plt.got at 0xf7febf94
Applying 15 PLT Relocation(s) for ./test10
Calling Init for /lib/i386-linux-gnu/libgcc_s.so.1 @0xf6f83dd4
GetDynablocksFromAddress(0xf7968008, 0xf6f83dd4) => 0x2bedc88 (0x53 / 0x83)
Ask for DynaRec Block Alloc #1
Emitting 316 bytes for 35 x86 bytes ( => /lib/i386-linux-gnu/libgcc_s.so.1/ + 7636)
0xf6f83dd4: 53 PUSH reg
0xf6b82000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf6f83dd5: 83 EC 08 SUB Ed, Ib
0xf6b82004: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf6f83dd8: E8 83 09 00 00 CALL Id
0xf6b82008: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e3037ddd MOVW r7, #0x3ddd
e34f76f8 MOVT r7, #0xf6f8
0xf6f83ddd: 81 C3 23 B2 01 00 ADD Ed, Id
0xf6b82010: 3 emited opcodes, state=1/1, set=3F, use=0, need=0
e30b3223 MOVW r3, #0xb223
e3403001 MOVT r3, #0x1
e0877003 ADD r7, r7, r3
0xf6f83de3: 8B 83 F8 FF FF FF MOV Gd, Ed
0xf6b8201c: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5174008 LDR r4, [r7, #-8]
0xf6f83de9: 85 C0 TEST Ed, Gd
0xf6b82020: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf6f83deb: 74 05 JZ ib
0xf6b82034: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf6f83ded: E8 B6 02 00 00 CALL Id (=> /lib/i386-linux-gnu/libgcc_s.so.1/ + 8360)
0xf6b82040: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf6f83df2/0xf6b82090-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3032df2 MOVW r2, #0x3df2
e34f26f8 MOVT r2, #0xf6f8
e3023090 MOVW r3, #0x2090
e34f36b8 MOVT r3, #0xf6b8
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e304c0a8 MOVW r12, #0x40a8
e34fc6f8 MOVT r12, #0xf6f8
e30a1fe8 MOVW r1, #0xafe8
e34012c5 MOVT r1, #0x2c5
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf6f83df2: 83 C4 08 ADD Ed, Ib
0xf6b82090: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf6f83df5: 5B POP reg
0xf6b820fc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf6f83df6: C3 RET
0xf6b82100: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf6f83dd4:0xf6f83df7 (0xf6b82000, 0x13c bytes, with 2 son(s))
Calling DynaRec Block @0xf6f83dd4 (0xf6b82000) of 11 x86 instructions (nolinker=0, father=(nil)) emu=0x2bb36d8
GetDynablocksFromAddress(0xf7968008, 0xf6f840a8) => 0x2bedcf8 (0xff / 0xa3)
Emitting 56 bytes for 6 x86 bytes ( => /lib/i386-linux-gnu/libgcc_s.so.1/ + 8360)
0xf6f840a8: FF A3 F8 FF FF FF JMP Ed
0xf6b82200: 14 emited opcodes, state=0/0, set=0, use=0, need=0
e517c008 LDR r12, [r7, #-8]
Jump to linker (#0) nolinker=0
e30a1638 MOVW r1, #0xa638
e34012c5 MOVT r1, #0x2c5
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0xf6f840a8:0xf6f840ae (0xf6b82200, 0x38 bytes, with 0 son(s))

Program received signal SIGILL, Illegal instruction.
0xf6f82000 in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf6f82000 ? ; <UNDEFINED> instruction: 0x464c457f
0xf6f82004 ? andeq r0, r1, r1, lsl #2
0xf6f82008 ? andeq r0, r0, r0
0xf6f8200c ? andeq r0, r0, r0
0xf6f82010 ? andeq r0, r3, r3
0xf6f82014 ? andeq r0, r0, r1
0xf6f82018 ? strheq r2, [r0], -r0
0xf6f8201c ? andeq r0, r0, r4, lsr r0
0xf6f82020 ? andeq r12, r1, r8, ror #3
0xf6f82024 ? andeq r0, r0, r0
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02bb36d8 r1 0x02c5afe8 r2 0x02c5afe8 r3 0xf6b82200 r4 0x02bdeb94 r5 0x00000000 r6 0x00000000 r7 0xf6f9f000 r8 0xf796639c r9 0x00000000 r10 0x00000000
r11 0x00000000 r12 0xf6f840a8 sp 0xfffef0ac lr 0x02893a30 pc 0xf6f82000 cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf6f82000
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02bb14e0
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 258 name box86 from 0xf6f82000
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf6f82000 in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4143575040, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4143575040) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2c5a358
block = 0x2bdeb94
father = <optimized out>
#3 0x02bb14e0 in ?? ()
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf6f81fe0: andeq r0, r0, r0
0xf6f81fe4: andeq r0, r0, r0
0xf6f81fe8: andeq r0, r0, r0
0xf6f81fec: andeq r0, r0, r0
0xf6f81ff0: andeq r0, r0, r0
0xf6f81ff4: andeq r0, r0, r0
0xf6f81ff8: andeq r0, r0, r0
0xf6f81ffc: andeq r0, r0, r0
=> 0xf6f82000: ; <UNDEFINED> instruction: 0x464c457f
0xf6f82004: andeq r0, r1, r1, lsl #2
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:91BD005F
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test11
Read 31 Section header
Read 10 Program header
Loading Sections Table String (idx = 30)
Loading SymTab Strings (idx = 29)
Loading SymTab (idx = 28)
Loading Dynamic (idx = 23)
Rel Table @0x498 (0x40/0x8)
PLT Table @0x4d8 (type=17 0x48/0x8)
The GOT Table is at address 0x2fbc
The .init is at address 0x520
The .init_array is at address 0x2eb4, and have 1 elements
The .fini is at address 0xb64
The .fini_array is at address 0x2eb8, and have 1 elements
The .text is at address 0x600, and is 1380 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test11" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x3014 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=20 (align=4)
Allocating 0x3014 memory @(nil) for Elf "./test11"
Got 0xf7fe9000 (delta=0xf7fe9000)
Loading block #2 @0xf7fe9000 (0xf04/0xf04)
Add ELF eXecutable Memory 0xf7fe9000:0xf04
addDBFromAddressRange 0xf7fe9000 -> 0xf7fe9f03
Loading block #3 @0xf7febeac (0x15c/0x168)
Loading TLS block #6 @0x2bb6b28 (0x8/0x12)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Already present in maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test11...
Applying 8 Relocation(s) for ./test11
PLT Resolver injected in plt.got at 0xf7febfc4
Applying 9 PLT Relocation(s) for ./test11
Entry Point is 0xf7fe9714
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fe9714, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=40 Return=0xf7fe9745: elf is ./test11
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfdc with sym=__libc_start_main (0xf7fe95b6 -> 0x2bb9e1c / (noelf))
return 0xF7FE9AE0
0264|0xf7fe9745: Calling __libc_start_main (F7FE9600, 00000001, F79663C0...) =>Calling init(0xf7fe9ae0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fe9ae0) => 0x2bb6b50 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 544 bytes for 93 x86 bytes ( => ./test11/__libc_csu_init)
0xf7fe9ae0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fe9ae1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fe9ae2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fe9ae3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fe9ae4: E8 67 FC FF FF CALL Id (=> ./test11/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e3097ae9 MOVW r7, #0x9ae9
e34f77fe MOVT r7, #0xf7fe
0xf7fe9ae9: 81 C3 D3 24 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e30234d3 MOVW r3, #0x24d3
e0877003 ADD r7, r7, r3
0xf7fe9aef: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fe9af2: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fe9af6: 8D B3 FC FE FF FF LEA Gd, Ed
0xf6d67028: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e3002104 MOVW r2, #0x104
e047a002 SUB r10, r7, r2
----> potential Son here
0xf7fe9afc: E8 1F FA FF FF CALL Id (=> ./test11/)
0xf6d67030: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fe9b01/0xf6d67080-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3092b01 MOVW r2, #0x9b01
e34f27fe MOVT r2, #0xf7fe
e3073080 MOVW r3, #0x7080
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e309c520 MOVW r12, #0x9520
e34fc7fe MOVT r12, #0xf7fe
e3021818 MOVW r1, #0x2818
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fe9b01: 8D 83 F8 FE FF FF LEA Gd, Ed
0xf6d67080: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002108 MOVW r2, #0x108
e0474002 SUB r4, r7, r2
0xf7fe9b07: 29 C6 SUB Ed, Gd
0xf6d67088: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fe9b09: C1 FE 02 SAR Ed, Ib
0xf6d6708c: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fe9b0c: 85 F6 TEST Ed, Gd
0xf6d67090: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fe9b0e: 74 25 JZ ib
0xf6d670a4: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fe9b10: 31 FF XOR Ed, Gd
0xf6d670b0: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fe9b12: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b4: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fe9b18: 83 EC 04 SUB Ed, Ib
0xf6d670b4: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fe9b1b: 55 PUSH reg
0xf6d670b8: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fe9b1c: FF 74 24 2C PUSH Ed
0xf6d670bc: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fe9b20: FF 74 24 2C PUSH Ed
0xf6d670c4: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fe9b24: FF 94 BB F8 FE FF FF CALL Ed
0xf6d670cc: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c108 LDR r12, [r2, #-264]
CStack PUSH 0xf7fe9b2b/0xf6d67140-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3092b2b MOVW r2, #0x9b2b
e34f27fe MOVT r2, #0xf7fe
e3073140 MOVW r3, #0x7140
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e3021828 MOVW r1, #0x2828
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fe9b2b: 83 C7 01 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fe9b2e: 83 C4 10 ADD Ed, Ib
0xf6d67144: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fe9b31: 39 FE CMP Ed, Gd
0xf6d67148: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fe9b33: 75 E3 JNZ ib
0xf6d6715c: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fe9b35: 83 C4 0C ADD Ed, Ib
0xf6d67168: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fe9b38: 5B POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fe9b39: 5E POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fe9b3a: 5F POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fe9b3b: 5D POP reg
0xf6d671e0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fe9b3c: C3 RET
0xf6d671e4: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fe9ae0:0xf7fe9b3d (0xf6d67000, 0x220 bytes, with 6 son(s))
Running DynaRec Block @0xf7fe9ae0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test11/)
0xf7fe9520: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fe9521: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fe9524: E8 27 02 00 00 CALL Id (=> ./test11/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e3097529 MOVW r7, #0x9529
e34f77fe MOVT r7, #0xf7fe
0xf7fe9529: 81 C3 93 2A 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3023a93 MOVW r3, #0x2a93
e0877003 ADD r7, r7, r3
0xf7fe952f: 8B 83 38 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5974038 LDR r4, [r7, #56]
0xf7fe9535: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fe9537: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fe9539: E8 BA 00 00 00 CALL Id (=> ./test11/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fe953e/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e309253e MOVW r2, #0x953e
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e309c5f8 MOVW r12, #0x95f8
e34fc7fe MOVT r12, #0xf7fe
e30217d8 MOVW r1, #0x27d8
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fe953e: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fe9541: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fe9542: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fe9520:0xf7fe9543 (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGSEGV, Segmentation fault.
0xf6d6736c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf6d6736c ? strd r2, [r0, r1]
0xf6d67370 ? stmdb r8!, {r2}
0xf6d67374 ? movw r12, #38392 ; 0x95f8
0xf6d67378 ? movt r12, #63486 ; 0xf7fe
0xf6d6737c ? movw r1, #10200 ; 0x27d8
0xf6d67380 ? movt r1, #700 ; 0x2bc
0xf6d67384 ? ldr r2, [r1]
0xf6d67388 ? bx r2
0xf6d6738c ? movw r12, #0
0xf6d67390 ? str r12, [r0, #764] ; 0x2fc
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02bb36d8 r1 0x15e14438 r2 0xf7fe953e r3 0xf6d6738c r4 0xf7fe9ae0 r5 0xf79663c0 r6 0x00000000 r7 0xf7febfbc r8 0xf796636c r9 0x02bb18c8 r10 0xf7febeb8
r11 0x00000000 r12 0xf7fe9520 sp 0xfffeee34 lr 0x02893a30 pc 0xf6d6736c cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf6d6736c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 264 name box86 from 0xf6d6736c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf6d6736c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667580, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667580) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2910
block = 0xf7fe9ae0
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134310624
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27cbf94)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf6d6734c: add r1, r1, r2, lsl #3
0xf6d67350: add r2, r2, #1
0xf6d67354: and r2, r2, #31
0xf6d67358: str r2, [r0, #884] ; 0x374
0xf6d6735c: movw r2, #38206 ; 0x953e
0xf6d67360: movt r2, #63486 ; 0xf7fe
0xf6d67364: movw r3, #29580 ; 0x738c
0xf6d67368: movt r3, #63190 ; 0xf6d6
=> 0xf6d6736c: strd r2, [r0, r1]
0xf6d67370: stmdb r8!, {r2}
>>> x/10i $pc-32

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:59871900
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test12
Read 31 Section header
Read 9 Program header
Loading Sections Table String (idx = 30)
Loading SymTab Strings (idx = 29)
Loading SymTab (idx = 28)
Loading Dynamic (idx = 22)
Rel Table @0x368 (0x48/0x8)
PLT Table @0x3b0 (type=17 0x10/0x8)
The GOT.PLT Table is at address 0x2000
The GOT Table is at address 0x1fe8
The .init is at address 0x3c0
The .init_array is at address 0x1eec, and have 1 elements
The .fini is at address 0x734
The .fini_array is at address 0x1ef0, and have 1 elements
The .text is at address 0x430, and is 770 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test12" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x2020 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x2020 memory @(nil) for Elf "./test12"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0x8d8/0x8d8)
Add ELF eXecutable Memory 0xf7fea000:0x8d8
addDBFromAddressRange 0xf7fea000 -> 0xf7fea8d7
Loading block #3 @0xf7febeec (0x130/0x134)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test12...
Applying 9 Relocation(s) for ./test12
PLT Resolver injected in plt.got at 0xf7fec008
Applying 2 PLT Relocation(s) for ./test12
Entry Point is 0xf7fea430
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea430, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=8 Return=0xf7fea461: elf is ./test12
PltReolver: Apply Global R_386_JMP_SLOT @0xf7fec010 with sym=__libc_start_main (0xf7fea416 -> 0x2bb79fb / (noelf))
return 0xF7FEA6D0
0270|0xf7fea461: Calling __libc_start_main (F7FEA5A0, 00000001, F79663C0...) =>Calling init(0xf7fea6d0) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea6d0) => 0x2bb68d8 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 544 bytes for 93 x86 bytes ( => ./test12/__libc_csu_init)
0xf7fea6d0: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea6d1: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea6d2: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea6d3: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea6d4: E8 97 FD FF FF CALL Id (=> ./test12/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a76d9 MOVW r7, #0xa6d9
e34f77fe MOVT r7, #0xf7fe
0xf7fea6d9: 81 C3 27 19 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013927 MOVW r3, #0x1927
e0877003 ADD r7, r7, r3
0xf7fea6df: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea6e2: 8B 6C 24 20 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989020 LDR r9, [r8, #32]
0xf7fea6e6: 8D B3 F0 FE FF FF LEA Gd, Ed
0xf6d67028: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e3002110 MOVW r2, #0x110
e047a002 SUB r10, r7, r2
----> potential Son here
0xf7fea6ec: E8 CF FC FF FF CALL Id (=> ./test12/)
0xf6d67030: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea6f1/0xf6d67080-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a26f1 MOVW r2, #0xa6f1
e34f27fe MOVT r2, #0xf7fe
e3073080 MOVW r3, #0x7080
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac3c0 MOVW r12, #0xa3c0
e34fc7fe MOVT r12, #0xf7fe
e30214d0 MOVW r1, #0x24d0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea6f1: 8D 83 EC FE FF FF LEA Gd, Ed
0xf6d67080: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002114 MOVW r2, #0x114
e0474002 SUB r4, r7, r2
0xf7fea6f7: 29 C6 SUB Ed, Gd
0xf6d67088: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea6f9: C1 FE 02 SAR Ed, Ib
0xf6d6708c: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea6fc: 85 F6 TEST Ed, Gd
0xf6d67090: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea6fe: 74 25 JZ ib
0xf6d670a4: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea700: 31 FF XOR Ed, Gd
0xf6d670b0: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea702: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b4: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea708: 83 EC 04 SUB Ed, Ib
0xf6d670b4: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea70b: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea70f: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea713: 55 PUSH reg
0xf6d670c8: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
----> potential Son here
0xf7fea714: FF 94 BB EC FE FF FF CALL Ed
0xf6d670cc: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c114 LDR r12, [r2, #-276]
CStack PUSH 0xf7fea71b/0xf6d67140-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a271b MOVW r2, #0xa71b
e34f27fe MOVT r2, #0xf7fe
e3073140 MOVW r3, #0x7140
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30214e0 MOVW r1, #0x24e0
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea71b: 83 C7 01 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea71e: 83 C4 10 ADD Ed, Ib
0xf6d67144: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea721: 39 FE CMP Ed, Gd
0xf6d67148: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea723: 75 E3 JNZ ib
0xf6d6715c: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea725: 83 C4 0C ADD Ed, Ib
0xf6d67168: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea728: 5B POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea729: 5E POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea72a: 5F POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea72b: 5D POP reg
0xf6d671e0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea72c: C3 RET
0xf6d671e4: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea6d0:0xf7fea72d (0xf6d67000, 0x220 bytes, with 6 son(s))
Running DynaRec Block @0xf7fea6d0 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test12/)
0xf7fea3c0: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea3c1: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea3c4: E8 A7 00 00 00 CALL Id (=> ./test12/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a73c9 MOVW r7, #0xa3c9
e34f77fe MOVT r7, #0xf7fe
0xf7fea3c9: 81 C3 37 1C 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013c37 MOVW r3, #0x1c37
e0877003 ADD r7, r7, r3
0xf7fea3cf: 8B 83 F0 FF FF FF MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5174010 LDR r4, [r7, #-16]
0xf7fea3d5: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea3d7: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea3d9: E8 4A 00 00 00 CALL Id (=> ./test12/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea3de/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a23de MOVW r2, #0xa3de
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac428 MOVW r12, #0xa428
e34fc7fe MOVT r12, #0xf7fe
e3021558 MOVW r1, #0x2558
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea3de: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea3e1: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea3e2: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea3c0:0xf7fea3e3 (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796639c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796639c ? ; <UNDEFINED> instruction: 0xf7fea461
0xf79663a0 ? ; <UNDEFINED> instruction: 0xf7fea5a0
0xf79663a4 ? andeq r0, r0, r1
0xf79663a8 ? ; <UNDEFINED> instruction: 0xf79663c0
0xf79663ac ? ; <UNDEFINED> instruction: 0xf7fea6d0
0xf79663b0 ? ; <UNDEFINED> instruction: 0xf7fea730
0xf79663b4 ? andeq r0, r0, r0
0xf79663b8 ? ; <UNDEFINED> instruction: 0xf79663bc
0xf79663bc ? andeq r0, r0, r1
0xf79663c0 ? ; <UNDEFINED> instruction: 0xf79664fa
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02b958a0 r1 0x02bbdab6 r2 0x0000a3de r3 0x02bb7984 r4 0x02bb7984 r5 0xf79663c0 r6 0x00000000 r7 0xf7fec000 r8 0xf7966360 r9 0x00000001 r10 0xf7fec180
r11 0x00000000 r12 0x00000000 sp 0xfffeee34 lr 0x02893a30 pc 0xf796639c cpsr 0x80000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796639c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 270 name box86 from 0xf796639c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796639c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667648, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667648) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc2838
block = 0x2bb7984
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = 0
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = 0 '\000'
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796637c: ; <UNDEFINED> instruction: 0xf7fec000
0xf7966380: andeq r0, r0, r1
0xf7966384: andeq r0, r0, r0
0xf7966388: andeq r0, r0, r0
0xf796638c: adcseq r10, r10, #164, 30 ; 0x290
0xf7966390: andeq r0, r0, r1
0xf7966394: adcseq r1, r11, #224, 8 ; 0xe0000000
0xf7966398: adcseq r1, r11, #200, 16 ; 0xc80000
=> 0xf796639c: ; <UNDEFINED> instruction: 0xf7fea461
0xf79663a0: ; <UNDEFINED> instruction: 0xf7fea5a0
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:A48B00C0
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test13
Read 29 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 27)
Loading SymTab (idx = 26)
Loading Dynamic (idx = 21)
Rel Table @0x408 (0x40/0x8)
PLT Table @0x448 (type=17 0x40/0x8)
The GOT Table is at address 0x1fc0
The .init is at address 0x488
The .init_array is at address 0x1ec0, and have 1 elements
The .fini is at address 0x994
The .fini_array is at address 0x1ec4, and have 1 elements
The .text is at address 0x550, and is 1090 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test13" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x245c (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x245c memory @(nil) for Elf "./test13"
Got 0xf7fea000 (delta=0xf7fea000)
Loading block #2 @0xf7fea000 (0xc64/0xc64)
Add ELF eXecutable Memory 0xf7fea000:0xc64
addDBFromAddressRange 0xf7fea000 -> 0xf7feac63
Loading block #3 @0xf7febec0 (0x148/0x59c)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test13...
Applying 8 Relocation(s) for ./test13
PLT Resolver injected in plt.got at 0xf7febfc8
Applying 8 PLT Relocation(s) for ./test13
Entry Point is 0xf7fea6f0
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fea6f0, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=24 Return=0xf7fea721: elf is ./test13
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfd8 with sym=__libc_start_main (0xf7fea4f6 -> 0x2bb7af3 / (noelf))
return 0xF7FEA930
0281|0xf7fea721: Calling __libc_start_main (F7FEA550, 00000001, F79663C0...) =>Calling init(0xf7fea930) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fea930) => 0x2bb69d0 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 540 bytes for 93 x86 bytes ( => ./test13/__libc_csu_init)
0xf7fea930: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea931: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fea932: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fea933: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea934: E8 F7 FD FF FF CALL Id (=> ./test13/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7939 MOVW r7, #0xa939
e34f77fe MOVT r7, #0xf7fe
0xf7fea939: 81 C3 87 16 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013687 MOVW r3, #0x1687
e0877003 ADD r7, r7, r3
0xf7fea93f: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fea942: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fea946: 8D B3 04 FF FF FF LEA Gd, Ed
0xf6d67028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0fc SUB r10, r7, #0xfc
----> potential Son here
0xf7fea94c: E8 37 FB FF FF CALL Id (=> ./test13/)
0xf6d6702c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea951/0xf6d6707c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a2951 MOVW r2, #0xa951
e34f27fe MOVT r2, #0xf7fe
e307307c MOVW r3, #0x707c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac488 MOVW r12, #0xa488
e34fc7fe MOVT r12, #0xf7fe
e3021660 MOVW r1, #0x2660
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea951: 8D 83 00 FF FF FF LEA Gd, Ed
0xf6d6707c: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002100 MOVW r2, #0x100
e0474002 SUB r4, r7, r2
0xf7fea957: 29 C6 SUB Ed, Gd
0xf6d67084: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fea959: C1 FE 02 SAR Ed, Ib
0xf6d67088: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fea95c: 85 F6 TEST Ed, Gd
0xf6d6708c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea95e: 74 25 JZ ib
0xf6d670a0: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fea960: 31 FF XOR Ed, Gd
0xf6d670ac: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fea962: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b0: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fea968: 83 EC 04 SUB Ed, Ib
0xf6d670b0: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fea96b: 55 PUSH reg
0xf6d670b4: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fea96c: FF 74 24 2C PUSH Ed
0xf6d670b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fea970: FF 74 24 2C PUSH Ed
0xf6d670c0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fea974: FF 94 BB 00 FF FF FF CALL Ed
0xf6d670c8: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c100 LDR r12, [r2, #-256]
CStack PUSH 0xf7fea97b/0xf6d6713c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a297b MOVW r2, #0xa97b
e34f27fe MOVT r2, #0xf7fe
e307313c MOVW r3, #0x713c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e3021670 MOVW r1, #0x2670
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fea97b: 83 C7 01 ADD Ed, Ib
0xf6d6713c: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fea97e: 83 C4 10 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fea981: 39 FE CMP Ed, Gd
0xf6d67144: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea983: 75 E3 JNZ ib
0xf6d67158: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fea985: 83 C4 0C ADD Ed, Ib
0xf6d67164: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea988: 5B POP reg
0xf6d671d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea989: 5E POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fea98a: 5F POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fea98b: 5D POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fea98c: C3 RET
0xf6d671e0: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fea930:0xf7fea98d (0xf6d67000, 0x21c bytes, with 6 son(s))
Running DynaRec Block @0xf7fea930 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test13/)
0xf7fea488: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fea489: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fea48c: E8 9F 02 00 00 CALL Id (=> ./test13/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30a7491 MOVW r7, #0xa491
e34f77fe MOVT r7, #0xf7fe
0xf7fea491: 81 C3 2F 1B 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013b2f MOVW r3, #0x1b2f
e0877003 ADD r7, r7, r3
0xf7fea497: 8B 83 34 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5974034 LDR r4, [r7, #52]
0xf7fea49d: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fea49f: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fea4a1: E8 A2 00 00 00 CALL Id (=> ./test13/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fea4a6/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30a24a6 MOVW r2, #0xa4a6
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e30ac548 MOVW r12, #0xa548
e34fc7fe MOVT r12, #0xf7fe
e3021b80 MOVW r1, #0x2b80
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fea4a6: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fea4a9: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fea4aa: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fea488:0xf7fea4ab (0xf6d67300, 0x138 bytes, with 2 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796639c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796639c ? ; <UNDEFINED> instruction: 0xf7fea721
0xf79663a0 ? ; <UNDEFINED> instruction: 0xf7fea550
0xf79663a4 ? andeq r0, r0, r1
0xf79663a8 ? ; <UNDEFINED> instruction: 0xf79663c0
0xf79663ac ? ; <UNDEFINED> instruction: 0xf7fea930
0xf79663b0 ? ; <UNDEFINED> instruction: 0xf7fea990
0xf79663b4 ? andeq r0, r0, r0
0xf79663b8 ? ; <UNDEFINED> instruction: 0xf79663bc
0xf79663bc ? andeq r0, r0, r1
0xf79663c0 ? ; <UNDEFINED> instruction: 0xf79664fa
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02bb36d8 r1 0x00000378 r2 0x00000001 r3 0x02bb7a7c r4 0x02bb7a7c r5 0xf79663c0 r6 0x00000000 r7 0xf7febfc0 r8 0xf7966360 r9 0x02bb18c8 r10 0xf7febec4
r11 0x00000000 r12 0x00000000 sp 0xfffeee34 lr 0x02893a30 pc 0xf796639c cpsr 0x80000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796639c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 281 name box86 from 0xf796639c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796639c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667584, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667584) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc27a0
block = 0x2bb7a7c
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = 0
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = 0 '\000'
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796637c: ; <UNDEFINED> instruction: 0xf7febfc0
0xf7966380: andeq r0, r0, r1
0xf7966384: andeq r0, r0, r0
0xf7966388: andeq r0, r0, r0
0xf796638c: adcseq r10, r10, #164, 30 ; 0x290
0xf7966390: andeq r0, r0, r1
0xf7966394: adcseq r1, r11, #224, 8 ; 0xe0000000
0xf7966398: adcseq r1, r11, #200, 16 ; 0xc80000
=> 0xf796639c: ; <UNDEFINED> instruction: 0xf7fea721
0xf79663a0: ; <UNDEFINED> instruction: 0xf7fea550
>>>

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:002CA889
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 43 Env var
Looking for ./test14
Read 36 Section header
Read 9 Program header
Loading Sections Table String (idx = 35)
Loading SymTab Strings (idx = 34)
Loading SymTab (idx = 33)
Loading Dynamic (idx = 21)
Rel Table @0x630 (0x40/0x8)
PLT Table @0x670 (type=17 0x98/0x8)
The GOT Table is at address 0x2f94
The .init is at address 0x708
The .init_array is at address 0x2e8c, and have 1 elements
The .fini is at address 0xdd4
The .fini_array is at address 0x2e90, and have 1 elements
The .text is at address 0x880, and is 1364 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test14" as #0 in elf collection
Elf Addr(v/p)=(nil)/(nil) Memsize=0x30ac (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x30ac memory @(nil) for Elf "./test14"
Got 0xf7fe9000 (delta=0xf7fe9000)
Loading block #2 @0xf7fe9000 (0x1078/0x1078)
Add ELF eXecutable Memory 0xf7fe9000:0x1078
addDBFromAddressRange 0xf7fe9000 -> 0xf7fea077
Loading block #3 @0xf7febe8c (0x17c/0x220)
Calc stack size, based on 1 elf(s)
Stack is @0xf7167020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf7167020/0x800000
Setup X86 Emu
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Already present in maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test14...
Applying 8 Relocation(s) for ./test14
PLT Resolver injected in plt.got at 0xf7febf9c
Applying 19 PLT Relocation(s) for ./test14
Entry Point is 0xf7fe9afb
Start x86emu on Main
Run X86 (0x2bb36d8), EIP=0xf7fe9afb, Stack=0xf7167020
... =>PltResolver: Addr=0x2bb46e0, Slot=96 Return=0xf7fe9b2c: elf is ./test14
PltReolver: Apply Global R_386_JMP_SLOT @0xf7febfd0 with sym=__libc_start_main (0xf7fe9806 -> 0x2bba373 / (noelf))
return 0xF7FE9D50
0286|0xf7fe9b2c: Calling __libc_start_main (F7FE9880, 00000001, F79663C0...) =>Calling init(0xf7fe9d50) from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0xf7fe9d50) => 0x2bb7048 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 544 bytes for 93 x86 bytes ( => ./test14/__libc_csu_init)
0xf7fe9d50: 55 PUSH reg
0xf6d67000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fe9d51: 57 PUSH reg
0xf6d67004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0xf7fe9d52: 56 PUSH reg
0xf6d67008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0xf7fe9d53: 53 PUSH reg
0xf6d6700c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fe9d54: E8 E7 FD FF FF CALL Id (=> ./test14/__x86.get_pc_thunk.bx)
0xf6d67010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e3097d59 MOVW r7, #0x9d59
e34f77fe MOVT r7, #0xf7fe
0xf7fe9d59: 81 C3 3B 22 00 00 ADD Ed, Id
0xf6d67018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e302323b MOVW r3, #0x223b
e0877003 ADD r7, r7, r3
0xf7fe9d5f: 83 EC 0C SUB Ed, Ib
0xf6d67020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0xf7fe9d62: 8B 6C 24 28 MOV Gd, Ed
0xf6d67024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989028 LDR r9, [r8, #40]
0xf7fe9d66: 8D B3 FC FE FF FF LEA Gd, Ed
0xf6d67028: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e3002104 MOVW r2, #0x104
e047a002 SUB r10, r7, r2
----> potential Son here
0xf7fe9d6c: E8 97 F9 FF FF CALL Id (=> ./test14/)
0xf6d67030: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fe9d71/0xf6d67080-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3092d71 MOVW r2, #0x9d71
e34f27fe MOVT r2, #0xf7fe
e3073080 MOVW r3, #0x7080
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e309c708 MOVW r12, #0x9708
e34fc7fe MOVT r12, #0xf7fe
e30310a0 MOVW r1, #0x30a0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fe9d71: 8D 83 F8 FE FF FF LEA Gd, Ed
0xf6d67080: 2 emited opcodes, state=0/0, set=0, use=0, need=0
e3002108 MOVW r2, #0x108
e0474002 SUB r4, r7, r2
0xf7fe9d77: 29 C6 SUB Ed, Gd
0xf6d67088: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0xf7fe9d79: C1 FE 02 SAR Ed, Ib
0xf6d6708c: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0xf7fe9d7c: 85 F6 TEST Ed, Gd
0xf6d67090: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fe9d7e: 74 25 JZ ib
0xf6d670a4: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0xf7fe9d80: 31 FF XOR Ed, Gd
0xf6d670b0: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0xf7fe9d82: 8D B6 00 00 00 00 LEA Gd, Ed
0xf6d670b4: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0xf7fe9d88: 83 EC 04 SUB Ed, Ib
0xf6d670b4: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0xf7fe9d8b: 55 PUSH reg
0xf6d670b8: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fe9d8c: FF 74 24 2C PUSH Ed
0xf6d670bc: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0xf7fe9d90: FF 74 24 2C PUSH Ed
0xf6d670c4: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
----> potential Son here
0xf7fe9d94: FF 94 BB F8 FE FF FF CALL Ed
0xf6d670cc: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c108 LDR r12, [r2, #-264]
CStack PUSH 0xf7fe9d9b/0xf6d67140-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3092d9b MOVW r2, #0x9d9b
e34f27fe MOVT r2, #0xf7fe
e3073140 MOVW r3, #0x7140
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30310b0 MOVW r1, #0x30b0
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0xf7fe9d9b: 83 C7 01 ADD Ed, Ib
0xf6d67140: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0xf7fe9d9e: 83 C4 10 ADD Ed, Ib
0xf6d67144: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0xf7fe9da1: 39 FE CMP Ed, Gd
0xf6d67148: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05a300b SUBS r3, r10, r11
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fe9da3: 75 E3 JNZ ib
0xf6d6715c: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0xf7fe9da5: 83 C4 0C ADD Ed, Ib
0xf6d67168: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fe9da8: 5B POP reg
0xf6d671d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fe9da9: 5E POP reg
0xf6d671d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0xf7fe9daa: 5F POP reg
0xf6d671dc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0xf7fe9dab: 5D POP reg
0xf6d671e0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0xf7fe9dac: C3 RET
0xf6d671e4: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0xf7fe9d50:0xf7fe9dad (0xf6d67000, 0x220 bytes, with 6 son(s))
Running DynaRec Block @0xf7fe9d50 (0xf6d67000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Emitting 312 bytes for 35 x86 bytes ( => ./test14/)
0xf7fe9708: 53 PUSH reg
0xf6d67300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0xf7fe9709: 83 EC 08 SUB Ed, Ib
0xf6d67304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0xf7fe970c: E8 2F 04 00 00 CALL Id (=> ./test14/__x86.get_pc_thunk.bx)
0xf6d67308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e3097711 MOVW r7, #0x9711
e34f77fe MOVT r7, #0xf7fe
0xf7fe9711: 81 C3 83 28 00 00 ADD Ed, Id
0xf6d67310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3023883 MOVW r3, #0x2883
e0877003 ADD r7, r7, r3
0xf7fe9717: 8B 83 60 00 00 00 MOV Gd, Ed
0xf6d67318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5974060 LDR r4, [r7, #96]
0xf7fe971d: 85 C0 TEST Ed, Gd
0xf6d6731c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0xf7fe971f: 74 05 JZ ib
0xf6d67330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0xf7fe9721: E8 52 01 00 00 CALL Id (=> ./test14/ + 8)
0xf6d6733c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0xf7fe9726/0xf6d6738c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e3092726 MOVW r2, #0x9726
e34f27fe MOVT r2, #0xf7fe
e307338c MOVW r3, #0x738c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e309c878 MOVW r12, #0x9878
e34fc7fe MOVT r12, #0xf7fe
e3021d48 MOVW r1, #0x2d48
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0xf7fe9726: 83 C4 08 ADD Ed, Ib
0xf6d6738c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0xf7fe9729: 5B POP reg
0xf6d673f8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0xf7fe972a: C3 RET
0xf6d673fc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0xf7fe9708:0xf7fe972b (0xf6d67300, 0x138 bytes, with 2 son(s))
Emitting 56 bytes for 6 x86 bytes ( => ./test14/ + 8)
0xf7fe9878: FF A3 60 00 00 00 JMP Ed
0xf6d67500: 14 emited opcodes, state=0/0, set=0, use=0, need=0
e597c060 LDR r12, [r7, #96]
Jump to linker (#0) nolinker=0
e3031b78 MOVW r1, #0x3b78
e34012bc MOVT r1, #0x2bc
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e30728a0 MOVW r2, #0x78a0
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0xf7fe9878:0xf7fe987e (0xf6d67500, 0x38 bytes, with 0 son(s))
GetDynablocksFromAddress(0xf7968008, 0x2bba2fc) => (nil) (0xcc / 0x53)
Emitting 136 bytes for 12 x86 bytes
0x2bba2fc: Native call to 0x2893edc
0xf6d67600: 19 emited opcodes, state=1/1, set=3F, use=0, need=3F
Native Call to __gmon_start__
e30ac2fd MOVW r12, #0xa2fd
e340c2bb MOVT r12, #0x2bb
e8801ff0 STM r0, {r4-r12}
e92d0001 PUSH {r0}
e3063378 MOVW r3, #0x6378
e3403288 MOVT r3, #0x288
e12fff33 BLX r3
e8bd0001 POP {r0}
e8901ff0 LDM r0, {r4-r12}
e30a3307 MOVW r3, #0xa307
e34032bb MOVT r3, #0x2bb
e15c0003 CMP r12, r3
1a000002 BNE +4
e5901358 LDR r1, [r0, #856]
e3510001 CMP r1, #0x1
1a000002 BNE +4
Jump to epilog
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
0x2bba307: C3 RET
0xf6d6764c: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (2, 0 sons)
--- DynaRec Block created @0x2bba2fc:0x2bba308 (0xf6d67600, 0x88 bytes, with 0 son(s))
0286|0xf7fe9726: Calling __gmon_start__ (00000000, 00000000, F7FEBF94...) =>__gmon_start__ called (dummy call)
return 0x02BBA2FC
Emitting 36 bytes for 9 x86 bytes ( => ./test14/frame_dummy)
0xf7fe9c30: 55 PUSH reg
0xf6d67700: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0xf7fe9c31: 89 E5 MOV Ed, Gd
0xf6d67704: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e1a09008 MOV r9, r8
0xf7fe9c33: 5D POP reg
0xf6d67708: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e8b80200 LDM r8!, {r9}
----> potential Son here
0xf7fe9c34: E9 57 FF FF FF JMP Id (=> ./test14/register_tm_clones)
0xf6d6770c: 6 emited opcodes, state=0/0, set=0, use=0, need=0
Jump to linker (#0) nolinker=0
e309cb90 MOVW r12, #0x9b90
e34fc7fe MOVT r12, #0xf7fe
e30317f0 MOVW r1, #0x37f0
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
---- END OF BLOCK ---- (4, 1 sons)
--- DynaRec Block created @0xf7fe9c30:0xf7fe9c39 (0xf6d67700, 0x24 bytes, with 1 son(s))

Program received signal SIGILL, Illegal instruction.
0xf796635c in ?? ()
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0xf796635c ? ; <UNDEFINED> instruction: 0xf7fe9d9b
0xf7966360 ? andeq r0, r0, r1
0xf7966364 ? adcseq r1, r11, #224, 8 ; 0xe0000000
0xf7966368 ? adcseq r1, r11, #200, 16 ; 0xc80000
0xf796636c ? ; <UNDEFINED> instruction: 0xf7fe9d71
0xf7966370 ? andeq r0, r0, r0
0xf7966374 ? andeq r0, r0, r0
0xf7966378 ? andeq r0, r0, r0
0xf796637c ? ; <UNDEFINED> instruction: 0xf7febf94
0xf7966380 ? andeq r0, r0, r1
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x00000002 r1 0x054baf78 r2 0x029078a0 r3 0xf6d67700 r4 0xf7febe8c r5 0xf79663c0 r6 0x00000000 r7 0xf7febf94 r8 0xf796635c r9 0x02bb18c8 r10 0x00000001
r11 0x00000000 r12 0xf7fe9b90 sp 0xfffeee34 lr 0x02893a30 pc 0xf796635c cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0xf796635c
[1] from 0x02893a30 in tableupdate+16 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[2] from 0x02893a30 in UpdateLinkTable+220 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
[3] from 0x02881694 in Run660F+45552 at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
[4] from 0xf7eb3b1c in _Io_Obstack_jumps
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 286 name box86 from 0xf796635c
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>> backtrace full
#0 0xf796635c in ?? ()
No symbol table info available.
#1 0x02893a30 in tableupdate (table=0x0, ref=4160667540, jumpto=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
No locals.
#2 UpdateLinkTable (emu=<optimized out>, table=0x0, addr=4160667540) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87
current = 0x2bc3058
block = 0xf7febe8c
father = <optimized out>
#3 0x02881694 in Run660F (emu=0x2bab5c0 <box86_dynarec_log>) at /mnt/crypt1/projects/builds/box86/src/emu/x86run660f.c:1060
i = -134308976
ip = 45790627
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8s = <error reading variable tmp8s (Cannot access memory at address 0xc27cf314)>
tmp16u = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32s = <optimized out>
opex = 0x2881694 <my___libc_start_main>
eax1 = {
q = {[0] = 137481502088, [1] = 0},
sq = {[0] = 137481502088, [1] = 0},
d = {[0] = 6.7924887120332405e-313, [1] = 0},
f = {[0] = 2.0165658e-37, [1] = 4.48415509e-44, [2] = 0, [3] = 0},
ud = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
sd = {[0] = 42548616, [1] = 32, [2] = 0, [3] = 0},
uw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = 15752, [1] = 649, [2] = 32, [3] = 0, [4] = 0, [5] = 0, [6] = 0, [7] = 0},
ub = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000",
sb = "\210=\211\002 \000\000\000\000\000\000\000\000\000\000"
}
opx2 = <optimized out>
opem = <optimized out>
opcodes660f = {[0] = 0x2876514 <Run660F+112> <repeats 16 times>, [16] = 0x2879cec <Run660F+14408>, [17] = 0x2877640 <Run660F+4508>, [18] = 0x28777b0 <Run660F+4876>, [19] = 0x2879a80 <Run660F+13788>, [20] = 0x2879a28 <Run660F+13700>, [21] = 0x28799c4 <Run660F+13600>, [22] = 0x28791bc <Run660F+11544>, [23] = 0x28783c4 <Run660F+7968>, [24] = 0x2876514 <Run660F+112>, [25] = 0x2876514 <Run660F+112>, [26] = 0x2876514 <Run660F+112>, [27] = 0x2876514 <Run660F+112>, [28] = 0x2876514 <Run660F+112>, [29] = 0x2876514 <Run660F+112>, [30] = 0x2876514 <Run660F+112>, [31] = 0x2878390 <Run660F+7916>, [32] = 0x2876514 <Run660F+112>, [33] = 0x2876514 <Run660F+112>, [34] = 0x2876514 <Run660F+112>, [35] = 0x2876514 <Run660F+112>, [36] = 0x2876514 <Run660F+112>, [37] = 0x2876514 <Run660F+112>, [38] = 0x2876514 <Run660F+112>, [39] = 0x2876514 <Run660F+112>, [40] = 0x2878324 <Run660F+7808>, [41] = 0x28782b8 <Run660F+7700>, [42] = 0x28794c0 <Run660F+12316>, [43] = 0x2876514 <Run660F+112>, [44] = 0x2878e08 <Run660F+10596>, [45] = 0x2878db0 <Run660F+10508>, [46] = 0x2876594 <Run660F+240>, [47] = 0x2876594 <Run660F+240>, [48] = 0x2876514 <Run660F+112>, [49] = 0x2876514 <Run660F+112>, [50] = 0x2876514 <Run660F+112>, [51] = 0x2876514 <Run660F+112>, [52] = 0x2876514 <Run660F+112>, [53] = 0x2876514 <Run660F+112>, [54] = 0x2876514 <Run660F+112>, [55] = 0x2876514 <Run660F+112>, [56] = 0x2878d20 <Run660F+10364>, [57] = 0x2876514 <Run660F+112>, [58] = 0x287772c <Run660F+4744>, [59] = 0x2876514 <Run660F+112>, [60] = 0x2876514 <Run660F+112>, [61] = 0x2876514 <Run660F+112>, [62] = 0x2876514 <Run660F+112>, [63] = 0x2876514 <Run660F+112>, [64] = 0x2877208 <Run660F+3428>, [65] = 0x28771a0 <Run660F+3324>, [66] = 0x2877270 <Run660F+3532>, [67] = 0x2879c1c <Run660F+14200>, [68] = 0x2879bb4 <Run660F+14096>, [69] = 0x2879b4c <Run660F+13992>, [70] = 0x2879ad8 <Run660F+13876>, [71] = 0x2878244 <Run660F+7584>, [72] = 0x28781dc <Run660F+7480>, [73] = 0x2879c84 <Run660F+14304>, [74] = 0x2878174 <Run660F+7376>, [75] = 0x2878cb8 <Run660F+10260>, [76] = 0x2878c4c <Run660F+10152>, [77] = 0x287a16c <Run660F+15560>, [78] = 0x2878bd4 <Run660F+10032>, [79] = 0x2879d58 <Run660F+14516>, [80] = 0x2877148 <Run660F+3236>, [81] = 0x2879f5c <Run660F+15032>, [82] = 0x2876514 <Run660F+112>, [83] = 0x2876514 <Run660F+112>, [84] = 0x2879ed8 <Run660F+14900>, [85] = 0x2879e54 <Run660F+14768>, [86] = 0x2879dd0 <Run660F+14636>, [87] = 0x2878580 <Run660F+8412>, [88] = 0x287850c <Run660F+8296>, [89] = 0x2878498 <Run660F+8180>, [90] = 0x287841c <Run660F+8056>, [91] = 0x2879720 <Run660F+12924>, [92] = 0x28796ac <Run660F+12808>, [93] = 0x28795c4 <Run660F+12576>, [94] = 0x2879550 <Run660F+12460>, [95] = 0x287a4a8 <Run660F+16388>, [96] = 0x287a2c4 <Run660F+15904>, [97] = 0x287a36c <Run660F+16072>, [98] = 0x28770e0 <Run660F+3132>, [99] = 0x2876cac <Run660F+2056>, [100] = 0x2876c34 <Run660F+1936>, [101] = 0x2876bc0 <Run660F+1820>, [102] = 0x2876b50 <Run660F+1708>, [103] = 0x2876a20 <Run660F+1404>, [104] = 0x2876978 <Run660F+1236>, [105] = 0x2876e18 <Run660F+2420>, [106] = 0x2876914 <Run660F+1136>, [107] = 0x2876f2c <Run660F+2696>, [108] = 0x2876ed4 <Run660F+2608>, [109] = 0x2877004 <Run660F+2912>, [110] = 0x2876ae4 <Run660F+1600>, [111] = 0x28768a8 <Run660F+1028>, [112] = 0x287682c <Run660F+904>, [113] = 0x2876d70 <Run660F+2252>, [114] = 0x2876784 <Run660F+736>, [115] = 0x2878f70 <Run660F+10956>, [116] = 0x2877068 <Run660F+3012>, [117] = 0x28766a4 <Run660F+512>, [118] = 0x2878fd4 <Run660F+11056>, [119] = 0x2876514 <Run660F+112>, [120] = 0x2876514 <Run660F+112>, [121] = 0x2876514 <Run660F+112>, [122] = 0x2876514 <Run660F+112>, [123] = 0x2876514 <Run660F+112>, [124] = 0x28780e8 <Run660F+7236>, [125] = 0x2876514 <Run660F+112>, [126] = 0x2877f1c <Run660F+6776>, [127] = 0x2879098 <Run660F+11252>, [128] = 0x2876514 <Run660F+112> <repeats 35 times>, [163] = 0x2878834 <Run660F+9104>, [164] = 0x2876528 <Run660F+132>, [165] = 0x2876528 <Run660F+132>, [166] = 0x2876514 <Run660F+112>, [167] = 0x2876514 <Run660F+112>, [168] = 0x2876514 <Run660F+112>, [169] = 0x2876514 <Run660F+112>, [170] = 0x2876514 <Run660F+112>, [171] = 0x2878e7c <Run660F+10712>, [172] = 0x2876638 <Run660F+404>, [173] = 0x2876638 <Run660F+404>, [174] = 0x2876514 <Run660F+112>, [175] = 0x2877cb4 <Run660F+6160>, [176] = 0x2876514 <Run660F+112>, [177] = 0x28788a4 <Run660F+9216>, [178] = 0x2876514 <Run660F+112>, [179] = 0x28776a8 <Run660F+4612>, [180] = 0x2876514 <Run660F+112>, [181] = 0x2876514 <Run660F+112>, [182] = 0x2879104 <Run660F+11360>, [183] = 0x2879044 <Run660F+11168>, [184] = 0x2876514 <Run660F+112>, [185] = 0x2876514 <Run660F+112>, [186] = 0x2879524 <Run660F+12416>, [187] = 0x28789a0 <Run660F+9468>, [188] = 0x2877544 <Run660F+4256>, [189] = 0x28774b0 <Run660F+4108>, [190] = 0x2878a28 <Run660F+9604>, [191] = 0x2876514 <Run660F+112>, [192] = 0x2876514 <Run660F+112>, [193] = 0x2877438 <Run660F+3988>, [194] = 0x28792d4 <Run660F+11824>, [195] = 0x2876514 <Run660F+112>, [196] = 0x287926c <Run660F+11720>, [197] = 0x2879214 <Run660F+11632>, [198] = 0x2877f70 <Run660F+6860>, [199] = 0x2876514 <Run660F+112>, [200] = 0x2878a24 <Run660F+9600>, [201] = 0x2878a20 <Run660F+9596>, [202] = 0x2878a1c <Run660F+9592>, [203] = 0x287872c <Run660F+8840>, [204] = 0x2877144 <Run660F+3232>, [205] = 0x2877140 <Run660F+3228>, [206] = 0x28764dc <Run660F+56>, [207] = 0x28764dc <Run660F+56>, [208] = 0x2876514 <Run660F+112>, [209] = 0x2878a74 <Run660F+9680>, [210] = 0x2879150 <Run660F+11436>, [211] = 0x287807c <Run660F+7128>, [212] = 0x2877ff8 <Run660F+6996>, [213] = 0x2876718 <Run660F+628>, [214] = 0x28786d8 <Run660F+8756>, [215] = 0x2878674 <Run660F+8656>, [216] = 0x2879358 <Run660F+11956>, [217] = 0x2878604 <Run660F+8544>, [218] = 0x2877ae8 <Run660F+5700>, [219] = 0x2877a64 <Run660F+5568>, [220] = 0x2878ef8 <Run660F+10836>, [221] = 0x28779ec <Run660F+5448>, [222] = 0x2877984 <Run660F+5344>, [223] = 0x2877900 <Run660F+5212>, [224] = 0x2877888 <Run660F+5092>, [225] = 0x2877808 <Run660F+4964>, [226] = 0x2878b54 <Run660F+9904>, [227] = 0x2878ae0 <Run660F+9788>, [228] = 0x2879450 <Run660F+12204>, [229] = 0x2879954 <Run660F+13488>, [230] = 0x2877ea0 <Run660F+6652>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#4 0xf7eb3b1c in _Io_Obstack_jumps () from /lib/arm-linux-gnueabihf/libc.so.6
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
>>> x/10i $pc-32
0xf796633c: andeq r0, r0, r0
0xf7966340: andeq r0, r0, r0
0xf7966344: andeq r0, r0, r0
0xf7966348: andeq r0, r0, r0
0xf796634c: andeq r0, r0, r0
0xf7966350: andeq r0, r0, r0
0xf7966354: andeq r0, r0, r0
0xf7966358: adcseq r1, r11, #200, 16 ; 0xc80000
=> 0xf796635c: ; <UNDEFINED> instruction: 0xf7fe9d9b
0xf7966360: andeq r0, r0, r1
>>>

I had noticed though that tests 6 and 10 had variable output.

- you mentioned live debugging yesterday.. meaning via an SSH session? If so then we'd have to do some routing trickery as I'm stuck behind the great firewall, but it can be done. (I'm an EU expatriate living in China at the moment).
 
Indeed - sorry about that, was busy posting the other tests so hadn't refreshed the page yet.
I'll get right on it and report back - thank you for the tutorial and pointers :)
 
I'm working on the debugging - but in the interim I built 'box86t' with zydis support. Thought an output of that might be interesting as well. (Built on the latest version of Box86 with the modification of line 980 of elfloader.c).

BOX86_JITGDB=1 BOX86_DYNAREC_LOG=2 BOX86_LOG=2 BOX86_DYNAREC_DUMP=2 /usr/local/bin/box86t ./test01
Debug level is 2
Dynarec blocks are dumped in color
Dynarec log level is 2
Launch gdb on segfault
Dynarec for ARM, with extension: HALF FAST_MULT EDSP NEON VFPv4 IDIVA PageSize:4096
Setting up canary (for Stack protector) at GS:0x14, value:0D0061EB
Using default BOX86_LD_LIBRARY_PATH: ./:lib/:lib32/:x86/
Using default BOX86_PATH: ./:bin/
Counted 41 Env var
Looking for ./test01
Read 31 Section header
Read 9 Program header
Loading Sections Table String (idx = 28)
Loading SymTab Strings (idx = 30)
Loading SymTab (idx = 29)
Loading Dynamic (idx = 22)
Rel Table @0x80482b8 (0x8/0x8)
PLT Table @0x80482c0 (type=17 0x10/0x8)
The GOT.PLT Table is at address 0x804a000
The GOT Table is at address 0x8049ffc
The .init is at address 0x80482d0
The .init_array is at address 0x8049f08, and have 1 elements
The .fini is at address 0x8048524
The .fini_array is at address 0x8049f0c, and have 1 elements
The .text is at address 0x8048340, and is 482 big
Loading DynSym Strings (idx = 6)
Loading DynSym (idx = 5)
Adding "./test01" as #0 in elf collection
Elf Addr(v/p)=0x8048000/0x8048000 Memsize=0x2020 (align=0x1000)
Elf Stack Memsize=1048576 (align=16)
Elf TLS Memsize=0 (align=0)
Allocating 0x3000 memory @0x8048000 for Elf "./test01"
Loading block #2 @0x8048000 (0x648/0x648)
Add ELF eXecutable Memory 0x8048000:0x648
addDBFromAddressRange 0x8048000 -> 0x8048647
Loading block #3 @0x8049f08 (0x114/0x118)
Calc stack size, based on 1 elf(s)
Stack is @0xf6d0c020 size=0x800000 align=0x10
Allocate a new X86 Emu, with EIP=(nil) and Stack=0xf6d0c020/0x800000
Setup X86 Emu
Trying to add "libc.so.6" to maplib
Trying to load "libc.so.6"
Simplified name is "libc.so.6"
Using native(wrapped) libc.so.6
Trying to add "ld-linux.so.2" to maplib
Trying to load "ld-linux.so.2"
Simplified name is "ld-linux.so.2"
Using native(wrapped) ld-linux.so.2
Created lib and added to maplib => success
Trying to add "libpthread.so.0" to maplib
Trying to load "libpthread.so.0"
Simplified name is "libpthread.so.0"
Using native(wrapped) libpthread.so.0
Created lib and added to maplib => success
Trying to add "librt.so.1" to maplib
Trying to load "librt.so.1"
Simplified name is "librt.so.1"
Using native(wrapped) librt.so.1
Created lib and added to maplib => success
Created lib and added to maplib => success
And now export symbols / relocation for ./test01...
Applying 1 Relocation(s) for ./test01
PLT Resolver injected in plt.got at 0x804a008
Applying 2 PLT Relocation(s) for ./test01
Entry Point is 0x8048340
Start x86emu on Main
Run X86 (0x3bde690), EIP=0x8048340, Stack=0xf6d0c020
... =>PltResolver: Addr=0x3bdf698, Slot=8 Return=0x8048361: elf is ./test01
PltReolver: Apply Global R_386_JMP_SLOT @0x804a010 with sym=__libc_start_main (0x8048326 -> 0x3be283b / (noelf))
return 0x00000001
3451|0x8048361: Calling __libc_start_main (0804843B, 00000001, F750B3F8...) =>Calling init(0x80484c0) from __libc_start_main
GetDynablocksFromAddress(0xf750d008, 0x80484c0) => 0x3be17a0 (0x55 / 0x57)
Ask for DynaRec Block Alloc #1
Emitting 536 bytes for 93 x86 bytes ( => ./test01/__libc_csu_init)
0x80484c0: 55 PUSH reg
0xf690c000: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0x80484c1: 57 PUSH reg
0xf690c004: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280800 STMDB r8!, {r11}
0x80484c2: 56 PUSH reg
0xf690c008: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0x80484c3: 53 PUSH reg
0xf690c00c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0x80484c4: E8 A7 FE FF FF CALL Id (=> ./test01/__x86.get_pc_thunk.bx)
0xf690c010: 2 emited opcodes, state=1/0, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30874c9 MOVW r7, #0x84c9
e3407804 MOVT r7, #0x804
0x80484c9: 81 C3 37 1B 00 00 ADD Ed, Id
0xf690c018: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013b37 MOVW r3, #0x1b37
e0877003 ADD r7, r7, r3
0x80484cf: 83 EC 0C SUB Ed, Ib
0xf690c020: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248800c SUB r8, r8, #0xc
0x80484d2: 8B 6C 24 20 MOV Gd, Ed
0xf690c024: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5989020 LDR r9, [r8, #32]
0x80484d6: 8D B3 0C FF FF FF LEA Gd, Ed
0xf690c028: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e247a0f4 SUB r10, r7, #0xf4
----> potential Son here
0x80484dc: E8 EF FD FF FF CALL Id (=> ./test01/)
0xf690c02c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0x80484e1/0xf690c07c-----
e590237c LDR r2, [r0, #892]
e3001380 MOVW r1, #0x380
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e580237c STR r2, [r0, #892]
e30824e1 MOVW r2, #0x84e1
e3402804 MOVT r2, #0x804
e30c307c MOVW r3, #0xc07c
e34f3690 MOVT r3, #0xf690
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e308c2d0 MOVW r12, #0x82d0
e340c804 MOVT r12, #0x804
e30e18e0 MOVW r1, #0xe8e0
e34013be MOVT r1, #0x3be
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0x80484e1: 8D 83 08 FF FF FF LEA Gd, Ed
0xf690c07c: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e24740f8 SUB r4, r7, #0xf8
0x80484e7: 29 C6 SUB Ed, Gd
0xf690c080: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e04aa004 SUB r10, r10, r4
0x80484e9: C1 FE 02 SAR Ed, Ib
0xf690c084: 1 emited opcodes, state=1/1, set=1B, use=0, need=0
e1a0a14a ASR r10, r10, #0x2
0x80484ec: 85 F6 TEST Ed, Gd
0xf690c088: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e01a300a ANDS r3, r10, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x80484ee: 74 25 JZ ib
0xf690c09c: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00002d BEQ +47
0x80484f0: 31 FF XOR Ed, Gd
0xf690c0a8: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e02bb00b EOR r11, r11, r11
0x80484f2: 8D B6 00 00 00 00 LEA Gd, Ed
0xf690c0ac: 0 emited opcodes, state=0/1, set=0, use=0, need=0
----> potential Son here
0x80484f8: 83 EC 04 SUB Ed, Ib
0xf690c0ac: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488004 SUB r8, r8, #0x4
0x80484fb: FF 74 24 2C PUSH Ed
0xf690c0b0: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0x80484ff: FF 74 24 2C PUSH Ed
0xf690c0b8: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e598102c LDR r1, [r8, #44]
e9280002 STMDB r8!, {r1}
0x8048503: 55 PUSH reg
0xf690c0c0: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
----> potential Son here
0x8048504: FF 94 BB 08 FF FF FF CALL Ed
0xf690c0c4: 29 emited opcodes, state=1/0, set=3F, use=0, need=0
e087210b ADD r2, r7, r11, lsl #2
e512c0f8 LDR r12, [r2, #-248]
CStack PUSH 0x804850b/0xf690c138-----
e590237c LDR r2, [r0, #892]
e3001380 MOVW r1, #0x380
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e580237c STR r2, [r0, #892]
e308250b MOVW r2, #0x850b
e3402804 MOVT r2, #0x804
e30c3138 MOVW r3, #0xc138
e34f3690 MOVT r3, #0xf690
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#4) nolinker=0
e30e18f0 MOVW r1, #0xe8f0
e34013be MOVT r1, #0x3be
e1b12f9f LDREXD r2, r3, [r1]
e15c0003 CMP r12, r3
012fff12 BXEQ r2
e3062310 MOVW r2, #0x6310
e3402290 MOVT r2, #0x290
e1a0300c MOV r3, r12
e1a1cf92 STREXD r12, r2, r3, [r1]
e35c0001 CMP r12, #0x1
e1a0c003 MOV r12, r3
0afffff5 BEQ -9
e12fff12 BX r2
----> potential Son here
0x804850b: 83 C7 01 ADD Ed, Ib
0xf690c138: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e28bb001 ADD r11, r11, #0x1
0x804850e: 83 C4 10 ADD Ed, Ib
0xf690c13c: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e2888010 ADD r8, r8, #0x10
0x8048511: 39 F7 CMP Ed, Gd
0xf690c140: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e05b300a SUBS r3, r11, r10
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x8048513: 75 E3 JNZ ib
0xf690c154: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
1affffd2 BNE -44
----> potential Son here
0x8048515: 83 C4 0C ADD Ed, Ib
0xf690c160: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388300c ORR r3, r8, #0xc
e208c00c AND r12, r8, #0xc
e298800c ADDS r8, r8, #0xc
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0x8048518: 5B POP reg
0xf690c1cc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0x8048519: 5E POP reg
0xf690c1d0: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0x804851a: 5F POP reg
0xf690c1d4: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80800 LDM r8!, {r11}
0x804851b: 5D POP reg
0xf690c1d8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0x804851c: C3 RET
0xf690c1dc: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e590137c LDR r1, [r0, #892]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e580137c STR r1, [r0, #892]
e3002380 MOVW r2, #0x380
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3062300 MOVW r2, #0x6300
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (32, 6 sons)
--- DynaRec Block created @0x80484c0:0x804851d (0xf690c000, 0x218 bytes, with 6 son(s))
Running DynaRec Block @0x80484c0 (0xf690c000) of 32 x86 insts (nolinker=0, father=(nil)) emu=0x3bde690
Emitting 340 bytes for 35 x86 bytes ( => ./test01/)
0x80482d0: 53 PUSH reg
0xf690c300: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0x80482d1: 83 EC 08 SUB Ed, Ib
0xf690c304: 1 emited opcodes, state=1/0, set=3F, use=0, need=0
e2488008 SUB r8, r8, #0x8
0x80482d4: E8 97 00 00 00 CALL Id (=> ./test01/__x86.get_pc_thunk.bx)
0xf690c308: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
Hack for Call x86.get_pc_thunk.reg
e30872d9 MOVW r7, #0x82d9
e3407804 MOVT r7, #0x804
0x80482d9: 81 C3 27 1D 00 00 ADD Ed, Id
0xf690c310: 2 emited opcodes, state=1/1, set=3F, use=0, need=0
e3013d27 MOVW r3, #0x1d27
e0877003 ADD r7, r7, r3
0x80482df: 8B 83 FC FF FF FF MOV Gd, Ed
0xf690c318: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5174004 LDR r4, [r7, #-4]
0x80482e5: 85 C0 TEST Ed, Gd
0xf690c31c: 5 emited opcodes, state=1/1, set=3F, use=0, need=8
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0143004 ANDS r3, r4, r4
0300c001 MOVWEQ r12, #0x1
e580c03c STR r12, [r0, #60]
0x80482e7: 74 05 JZ ib
0xf690c330: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a00001a BEQ +28
----> potential Son here
0x80482e9: E8 42 00 00 00 CALL Id (=> ./test01/)
0xf690c33c: 27 emited opcodes, state=1/0, set=3F, use=0, need=0
e30822ee MOVW r2, #0x82ee
e3402804 MOVT r2, #0x804
e9280004 STMDB r8!, {r2}
Native Call to __gmon_start__ (retn=0)
e302c809 MOVW r12, #0x2809
e340c3be MOVT r12, #0x3be
e8801ff0 STM r0, {r4-r12}
e92d0001 PUSH {r0}
e3043eb0 MOVW r3, #0x4eb0
e3403288 MOVT r3, #0x288
e12fff33 BLX r3
e8bd0001 POP {r0}
e8901ff0 LDM r0, {r4-r12}
e3023813 MOVW r3, #0x2813
e34033be MOVT r3, #0x3be
e15c0003 CMP r12, r3
1a000007 BNE +9
e8b81000 LDM r8!, {r12}
e30832ee MOVW r3, #0x82ee
e3403804 MOVT r3, #0x804
e15c0003 CMP r12, r3
1a000002 BNE +4
e5901360 LDR r1, [r0, #864]
e3510001 CMP r1, #0x1
1a000002 BNE +4
Jump to epilog
e3062300 MOVW r2, #0x6300
e3402290 MOVT r2, #0x290
e12fff12 BX r2
----> potential Son here
0x80482ee: 83 C4 08 ADD Ed, Ib
0xf690c3a8: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e3883008 ORR r3, r8, #0x8
e208c008 AND r12, r8, #0x8
e2988008 ADDS r8, r8, #0x8
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0x80482f1: 5B POP reg
0xf690c414: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0x80482f2: C3 RET
0xf690c418: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e590137c LDR r1, [r0, #892]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e580137c STR r1, [r0, #892]
e3002380 MOVW r2, #0x380
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3062300 MOVW r2, #0x6300
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (11, 2 sons)
--- DynaRec Block created @0x80482d0:0x80482f3 (0xf690c300, 0x154 bytes, with 2 son(s))
3451|0x804e8e0: Calling __gmon_start__ (00000000, 00000000, 0804A000...) =>__gmon_start__ called (dummy call)
return 0x03BE2808
Waiting for gdb...
GNU gdb (Raspbian 8.2.1-2) 8.2.1
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "arm-linux-gnueabihf".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word".
Attaching to process 3451
Reading symbols from /usr/local/bin/box86t...done.
Reading symbols from /lib/arm-linux-gnueabihf/libm.so.6...Reading symbols from /usr/lib/debug/.build-id/24/22b5cf95895f5f4f69dae68ad9f99198e43121.debug...done.
done.
Reading symbols from /lib/arm-linux-gnueabihf/libdl.so.2...Reading symbols from /usr/lib/debug/.build-id/bc/c9ee6666973f3f41da5bdf8c8d7c299e4a09a2.debug...done.
done.
Reading symbols from /lib/arm-linux-gnueabihf/librt.so.1...Reading symbols from /usr/lib/debug/.build-id/1d/5428c68f929c6b4c0b781a608fc95ccb886efb.debug...done.
done.
Reading symbols from /lib/arm-linux-gnueabihf/libpthread.so.0...Reading symbols from /usr/lib/debug/.build-id/79/58164ddcdf86b06e4a06700f80a4655a80c40e.debug...done.
done.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/arm-linux-gnueabihf/libthread_db.so.1".
Reading symbols from /lib/arm-linux-gnueabihf/libgcc_s.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/arm-linux-gnueabihf/libc.so.6...Reading symbols from /usr/lib/debug/.build-id/ef/dd27c16f5283e5c53dcbd1bbc3ef136e312d1b.debug...done.
done.
Reading symbols from /lib/ld-linux-armhf.so.3...Reading symbols from /usr/lib/debug/.build-id/fb/85e699c11db06c7b24f74de2cdada3146442a8.debug...done.
done.
0xf79af69c in __GI___nanosleep (requested_time=0xffe1bd3c, requested_time@entry=0xffe1bd34, remaining=remaining@entry=0x0) at ../sysdeps/unix/sysv/linux/nanosleep.c:28
28 ../sysdeps/unix/sysv/linux/nanosleep.c: No such file or directory.
─── Assembly ───────────────────────────────────────────────────────────────────
0xf79af688 __GI___nanosleep+16 ldr r3, [r3, r2]
0xf79af68c __GI___nanosleep+20 ldr r3, [r3]
0xf79af690 __GI___nanosleep+24 cmp r3, #0
0xf79af694 __GI___nanosleep+28 bne 0xf79af6b4 <__GI___nanosleep+60>
0xf79af698 __GI___nanosleep+32 mov r7, #162 ; 0xa2
0xf79af69c __GI___nanosleep+36 svc 0x00000000
0xf79af6a0 __GI___nanosleep+40 cmn r0, #4096 ; 0x1000
0xf79af6a4 __GI___nanosleep+44 mov r4, r0
0xf79af6a8 __GI___nanosleep+48 bhi 0xf79af6ec <__GI___nanosleep+116>
0xf79af6ac __GI___nanosleep+52 mov r0, r4
─── Breakpoints ────────────────────────────────────────────────────────────────
─── Expressions ────────────────────────────────────────────────────────────────
─── History ────────────────────────────────────────────────────────────────────
─── Memory ─────────────────────────────────────────────────────────────────────
─── Registers ──────────────────────────────────────────────────────────────────
r0 0xffe1bd3c r1 0x00000000 r2 0x0000006c r3 0x00000000
r4 0xf7b93968 r5 0xffe1bdf8 r6 0x0000000b r7 0x000000a2
r8 0x00000001 r9 0xffe1be78 r10 0x02bae024 r11 0xffffffff
r12 0x7780d000 sp 0xffe1bd28 lr 0xf79e0fc0 pc 0xf79af69c
cpsr 0x60000010 fpscr 0x00000010
─── Source ─────────────────────────────────────────────────────────────────────
Cannot display "nanosleep.c"
─── Stack ──────────────────────────────────────────────────────────────────────
[0] from 0xf79af69c in __GI___nanosleep+36 at ../sysdeps/unix/sysv/linux/nanosleep.c:28
[1] from 0xf79e0fc0 in usleep+92 at ../sysdeps/posix/usleep.c:32
[2] from 0x0288c6cc in my_box86signalhandler+608 at /mnt/crypt1/projects/builds/box86/src/libtools/signals.c:365
[3] from 0xf793d130 in __default_rt_sa_restorer at ../sysdeps/unix/sysv/linux/arm/sigrestorer.S:80
[4] from 0x02844680 in GetDynablocksFromAddress+32 at /mnt/crypt1/projects/builds/box86/src/elfs/elfloader.c:979
[5] from 0x02904ec0 in internalDBGetBlock+64 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:608
[6] from 0x029050b0 in DBGetBlock+56 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:637
[7] from 0x028928cc in DynaRun+244 at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:162
[8] from 0x0287fe78 in my___libc_start_main+148 at /mnt/crypt1/projects/builds/box86/src/emu/x86run_private.c:42
[9] from 0x028a30c8 in iFEpippppp+64 at /mnt/crypt1/projects/builds/box86/src/wrapped/generated/wrapper.c:2970
[+]
─── Threads ────────────────────────────────────────────────────────────────────
[1] id 3451 name box86t from 0xf79af69c in __GI___nanosleep+36 at ../sysdeps/unix/sysv/linux/nanosleep.c:28
─── Variables ──────────────────────────────────────────────────────────────────
arg requested_time = 0xffe1bd3c: {tv_sec = 0, tv_nsec = 1000000}, remaining = 0x0: Cannot access memory at address 0x0
loc _a1 = -1983172, _nr = 162, _a1tmp = -1983172, _a2tmp = 0, _a2 = 0, _sys_result = <optimized out>, sc_ret = <optimized out>
────────────────────────────────────────────────────────────────────────────────
>>>
backtrace full
#0 0xf79af69c in __GI___nanosleep (requested_time=0xffe1bd3c, requested_time@entry=0xffe1bd34, remaining=remaining@entry=0x0) at ../sysdeps/unix/sysv/linux/nanosleep.c:28
_a1 = -1983172
_nr = 162
_a1tmp = -1983172
_a2tmp = 0
_a2 = 0
_sys_result = <optimized out>
sc_ret = <optimized out>
sc_ret = <optimized out>
_sys_result = <optimized out>
_a1 = <optimized out>
_nr = <optimized out>
_a2tmp = <optimized out>
_a1tmp = <optimized out>
_a2 = <optimized out>
sc_cancel_oldtype = <optimized out>
_sys_result = <optimized out>
_a1 = <optimized out>
_nr = <optimized out>
_a2tmp = <optimized out>
_a1tmp = <optimized out>
_a2 = <optimized out>
#1 0xf79e0fc0 in usleep (useconds=useconds@entry=1000) at ../sysdeps/posix/usleep.c:32
ts = {
tv_sec = 0,
tv_nsec = 1000000
}
#2 0x0288c6cc in my_box86signalhandler (sig=11, info=0xffe1bdf8, ucntx=0xffe1be78) at /mnt/crypt1/projects/builds/box86/src/libtools/signals.c:365
waiting = 1
pid = <optimized out>
v = <optimized out>
db = 0x0
name = 0xfbad8001 <error: Cannot access memory at address 0xfbad8001>
x86pc = 4294967295
x86name = 0x2bae024 <ret> "???"
p = 0xffe1be78
addr = 0x1
pc = 0x2844680 <GetDynablocksFromAddress+32>
old_code = 1
old_pc = 0x2844680 <GetDynablocksFromAddress+32>
old_addr = 0x1
#3 <signal handler called>
No locals.
#4 0x02844680 in GetDynablocksFromAddress (context=0xf750d008, addr=addr@entry=0) at /mnt/crypt1/projects/builds/box86/src/elfs/elfloader.c:979
ret = <optimized out>
#5 0x02904ec0 in internalDBGetBlock (addr=addr@entry=0, create=create@entry=1, current=<optimized out>, emu=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:608
dynablocks = <optimized out>
block = 0x0
created = 0
#6 0x029050b0 in DBGetBlock (emu=emu@entry=0x3bde690, addr=0, create=create@entry=1, current=0xffe1c204, current@entry=0xffe1c1fc) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynablock.c:637
db = <optimized out>
#7 0x028928cc in DynaRun (emu=emu@entry=0x3bde690) at /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:162
block = <optimized out>
current = 0x3bed6b0
#8 0x0287fe78 in my___libc_start_main (emu=emu@entry=0x3bde690, main=0x804843b, argc=<optimized out>, ubp_av=<optimized out>, init=0x80484c0, fini=0x8048520, rtld_fini=0x0, stack_end=0xf750b3ec) at /mnt/crypt1/projects/builds/box86/src/emu/x86run_private.c:42
No locals.
#9 0x028a30c8 in iFEpippppp (emu=0x3bde690, fcn=42466788) at /mnt/crypt1/projects/builds/box86/src/wrapped/generated/wrapper.c:2970
fn = 0x287fde4 <my___libc_start_main>
#10 0x02885224 in x86Int3 (emu=emu@entry=0x3bde690) at /mnt/crypt1/projects/builds/box86/src/emu/x86int3.c:222
tid = 0
buff2 = '\000' <repeats 63 times>
tmp = <optimized out>
post = 0
pu32 = 0xd7b
s = 0x3be066b "__libc_start_main"
buff = "3451|0x8048361: Calling __libc_start_main (0804843B, 00000001, F750B3F8...)", '\000' <repeats 180 times>
buff3 = '\000' <repeats 63 times>
perr = 0
w = 0x28a3088 <iFEpippppp>
addr = 42466788
#11 0x0285158c in Run (emu=emu@entry=0x3bde690, step=step@entry=0) at /mnt/crypt1/projects/builds/box86/src/emu/x86run.c:929
opcode = <optimized out>
nextop = <optimized out>
oped = <optimized out>
tmp8u = <optimized out>
tmp8u2 = <optimized out>
tmp8s = <optimized out>
tmp16u = <optimized out>
tmp16u2 = <optimized out>
tmp16s = <optimized out>
tmp32u = <optimized out>
tmp32u2 = <optimized out>
tmp32u3 = <optimized out>
tmp32s = -48
tmp32s2 = <optimized out>
tmp64u = <optimized out>
tmp64s = <optimized out>
ip = 62793788
d = 1.2607049542383454e-296
f = -6.71523793e+33
ll = <optimized out>
opex = <optimized out>
eax1 = {
q = {[0] = 193302673827933584, [1] = 1},
sq = {[0] = 193302673827933584, [1] = 1},
d = {[0] = 9.4034240782420761e-296, [1] = 4.9406564584124654e-324},
f = {[0] = -6.72069725e+33, [1] = 2.56770635e-37, [2] = 1.40129846e-45, [3] = 0},
ud = {[0] = 4154830224, [1] = 45006785, [2] = 1, [3] = 0},
sd = {[0] = -140137072, [1] = 45006785, [2] = 1, [3] = 0},
uw = {[0] = 44432, [1] = 63397, [2] = 49089, [3] = 686, [4] = 1, [5] = 0, [6] = 0, [7] = 0},
sw = {[0] = -21104, [1] = -2139, [2] = -16447, [3] = 686, [4] = 1, [5] = 0, [6] = 0, [7] = 0},
ub = "\220\255\245\367\301\277\256\002\001\000\000\000\000\000\000",
sb = "\220\255\245\367\301\277\256\002\001\000\000\000\000\000\000"
}
opem = <optimized out>
eam1 = {
q = 94349134620,
sq = 94349134620,
ud = {[0] = 4154821404, [1] = 21},
sd = {[0] = -140145892, [1] = 21},
uw = {[0] = 35612, [1] = 63397, [2] = 21, [3] = 0},
sw = {[0] = -29924, [1] = -2139, [2] = 21, [3] = 0},
ub = "\034\213\245\367\025\000\000",
sb = "\034\213\245\367\025\000\000"
}
baseopcodes = {[0] = 0x2851158 <Run+5664>, [1] = 0x28510f0 <Run+5560>, [2] = 0x2850998 <Run+3680>, [3] = 0x2850930 <Run+3576>, [4] = 0x2850900 <Run+3528>, [5] = 0x28508d8 <Run+3488>, [6] = 0x2856e14 <Run+29404>, [7] = 0x2856df4 <Run+29372>, [8] = 0x28576e4 <Run+31660>, [9] = 0x2857684 <Run+31564>, [10] = 0x285774c <Run+31764>, [11] = 0x285731c <Run+30692>, [12] = 0x28564bc <Run+27012>, [13] = 0x285649c <Run+26980>, [14] = 0x2855be4 <Run+24748>, [15] = 0x2855bc8 <Run+24720>, [16] = 0x285737c <Run+30788>, [17] = 0x2856444 <Run+26892>, [18] = 0x285784c <Run+32020>, [19] = 0x2857494 <Run+31068>, [20] = 0x285782c <Run+31988>, [21] = 0x285709c <Run+30052>, [22] = 0x2852f64 <Run+13356>, [23] = 0x2852f44 <Run+13324>, [24] = 0x285710c <Run+30164>, [25] = 0x28570b4 <Run+30076>, [26] = 0x285716c <Run+30260>, [27] = 0x2855c50 <Run+24856>, [28] = 0x2856968 <Run+28208>, [29] = 0x2856950 <Run+28184>, [30] = 0x2852f2c <Run+13300>, [31] = 0x2852f0c <Run+13268>, [32] = 0x28568e8 <Run+28080>, [33] = 0x2856888 <Run+27984>, [34] = 0x285606c <Run+25908>, [35] = 0x285600c <Run+25812>, [36] = 0x2855fe4 <Run+25772>, [37] = 0x2855fc4 <Run+25740>, [38] = 0x2852f08 <Run+13264>, [39] = 0x2852ef4 <Run+13244>, [40] = 0x2852df8 <Run+12992>, [41] = 0x2852d90 <Run+12888>, [42] = 0x2852d20 <Run+12776>, [43] = 0x2852cb8 <Run+12672>, [44] = 0x2852e68 <Run+13104>, [45] = 0x2852c90 <Run+12632>, [46] = 0x2852ef0 <Run+13240>, [47] = 0x2852edc <Run+13220>, [48] = 0x2852c28 <Run+12528>, [49] = 0x2852bc8 <Run+12432>, [50] = 0x2856f04 <Run+29644>, [51] = 0x2856ea4 <Run+29548>, [52] = 0x2856e7c <Run+29508>, [53] = 0x2856e5c <Run+29476>, [54] = 0x2852ed8 <Run+13216>, [55] = 0x2852ec4 <Run+13196>, [56] = 0x2856304 <Run+26572>, [57] = 0x28562b0 <Run+26488>, [58] = 0x2856f6c <Run+29748>, [59] = 0x285625c <Run+26404>, [60] = 0x2856e40 <Run+29448>, [61] = 0x2856e2c <Run+29428>, [62] = 0x2852ec0 <Run+13192>, [63] = 0x2852eac <Run+13172>, [64] = 0x2852ea8 <Run+13168>, [65] = 0x2852ea4 <Run+13164>, [66] = 0x2852ea0 <Run+13160>, [67] = 0x2852e9c <Run+13156>, [68] = 0x2852e98 <Run+13152>, [69] = 0x2854650 <Run+19224>, [70] = 0x284fd8c <Run+596>, [71] = 0x284fd8c <Run+596>, [72] = 0x285464c <Run+19220>, [73] = 0x2854660 <Run+19240>, [74] = 0x285465c <Run+19236>, [75] = 0x2854658 <Run+19232>, [76] = 0x2854654 <Run+19228>, [77] = 0x2851e84 <Run+9036>, [78] = 0x284fd68 <Run+560>, [79] = 0x284fd68 <Run+560>, [80] = 0x2854470 <Run+18744>, [81] = 0x285446c <Run+18740>, [82] = 0x2854468 <Run+18736>, [83] = 0x2854464 <Run+18732>, [84] = 0x2854638 <Run+19200>, [85] = 0x2854664 <Run+19244>, [86] = 0x284fe08 <Run+720>, [87] = 0x284fe08 <Run+720>, [88] = 0x28535cc <Run+14996>, [89] = 0x2854480 <Run+18760>, [90] = 0x285447c <Run+18756>, [91] = 0x2854478 <Run+18752>, [92] = 0x2854474 <Run+18748>, [93] = 0x2854528 <Run+18928>, [94] = 0x284fd4c <Run+532>, [95] = 0x284fd4c <Run+532>, [96] = 0x2854488 <Run+18768>, [97] = 0x28545c0 <Run+19080>, [98] = 0x2854584 <Run+19020>, [99] = 0x284fe70 <Run+824>, [100] = 0x2854558 <Run+18976>, [101] = 0x285452c <Run+18932>, [102] = 0x28558b0 <Run+23928>, [103] = 0x2853ce0 <Run+16808>, [104] = 0x2853cc8 <Run+16784>, [105] = 0x2853c5c <Run+16676>, [106] = 0x2853c38 <Run+16640>, [107] = 0x2853bc8 <Run+16528>, [108] = 0x2853b94 <Run+16476>, [109] = 0x2853b60 <Run+16424>, [110] = 0x2853b44 <Run+16396>, [111] = 0x2853b28 <Run+16368>, [112] = 0x2854220 <Run+18152>, [113] = 0x28541f8 <Run+18112>, [114] = 0x285437c <Run+18500>, [115] = 0x28541d0 <Run+18072>, [116] = 0x28543a4 <Run+18540>, [117] = 0x285432c <Run+18420>, [118] = 0x2853f98 <Run+17504>, [119] = 0x2853f64 <Run+17452>, [120] = 0x2854160 <Run+17960>, [121] = 0x2854138 <Run+17920>, [122] = 0x2854354 <Run+18460>, [123] = 0x2854110 <Run+17880>, [124] = 0x28535a0 <Run+14952>, [125] = 0x2853574 <Run+14908>, [126] = 0x28542a0 <Run+18280>, [127] = 0x285353c <Run+14852>, [128] = 0x2850544 <Run+2572>, [129] = 0x2853f18 <Run+17376>, [130] = 0x2850544 <Run+2572>, [131] = 0x2853e98 <Run+17248>, [132] = 0x2850c60 <Run+4392>, [133] = 0x2850c0c <Run+4308>, [134] = 0x2850b98 <Run+4192>, [135] = 0x2850b34 <Run+4092>, [136] = 0x28540bc <Run+17796>, [137] = 0x2854070 <Run+17720>, [138] = 0x285401c <Run+17636>, [139] = 0x2853fd0 <Run+17560>, [140] = 0x28542dc <Run+18340>, [141] = 0x2854188 <Run+18000>, [142] = 0x2854248 <Run+18192>, [143] = 0x2853e44 <Run+17164>, [144] = 0x2851e9c <Run+9060>, [145] = 0x2851e98 <Run+9056>, [146] = 0x2851e94 <Run+9052>, [147] = 0x2851e90 <Run+9048>, [148] = 0x2851e8c <Run+9044>, [149] = 0x2851e88 <Run+9040>, [150] = 0x284fdd4 <Run+668>, [151] = 0x284fdd4 <Run+668>, [152] = 0x2851f7c <Run+9284>, [153] = 0x2851f6c <Run+9268>, [154] = 0x284fe70 <Run+824>, [155] = 0x2851f68 <Run+9264>, [156] = 0x2851f3c <Run+9220>, [157] = 0x2851f04 <Run+9164>, [158] = 0x2851ed0 <Run+9112>, [159] = 0x2851eb0 <Run+9080>, [160] = 0x2851ea0 <Run+9064>, [161] = 0x28521cc <Run+9876>, [162] = 0x28521bc <Run+9860>, [163] = 0x28521ac <Run+9844>, [164] = 0x2852174 <Run+9788>, [165] = 0x285213c <Run+9732>, [166] = 0x2852108 <Run+9680>, [167] = 0x28520d4 <Run+9628>, [168] = 0x28520b8 <Run+9600>, [169] = 0x28520a4 <Run+9580>, [170] = 0x2852078 <Run+9536>, [171] = 0x285204c <Run+9492>, [172] = 0x2852028 <Run+9456>, [173] = 0x2852004 <Run+9420>, [174] = 0x2851fd0 <Run+9368>, [175] = 0x2851f9c <Run+9316>, [176] = 0x2851f88 <Run+9296>, [177] = 0x2851cb8 <Run+8576>, [178] = 0x284fe58 <Run+800>, [179] = 0x284fe58 <Run+800>, [180] = 0x285466c <Run+19252>, [181] = 0x2854668 <Run+19248>, [182] = 0x284fe40 <Run+776>, [183] = 0x284fe40 <Run+776>, [184] = 0x2851ca8 <Run+8560>, [185] = 0x28538b0 <Run+15736>, [186] = 0x28538a0 <Run+15720>, [187] = 0x2853890 <Run+15704>, [188] = 0x2853880 <Run+15688>, [189] = 0x2853adc <Run+16292>, [190] = 0x284fca8 <Run+368>, [191] = 0x284fca8 <Run+368>, [192] = 0x28513c0 <Run+6280>, [193] = 0x2851348 <Run+6160>, [194] = 0x2851310 <Run+6104>, [195] = 0x28512e4 <Run+6060>, [196] = 0x284fe70 <Run+824>, [197] = 0x284fe70 <Run+824>, [198] = 0x2851430 <Run+6392>, [199] = 0x28510a0 <Run+5480>...}
opcodes0f = {[0] = 0x2855b68 <Run+24624>, [1] = 0x2855b14 <Run+24540>, [2] = 0x284fe70 <Run+824>, [3] = 0x284fe70 <Run+824>, [4] = 0x284fe70 <Run+824>, [5] = 0x284fe70 <Run+824>, [6] = 0x284fe70 <Run+824>, [7] = 0x284fe70 <Run+824>, [8] = 0x284fe70 <Run+824>, [9] = 0x284fe70 <Run+824>, [10] = 0x284fe70 <Run+824>, [11] = 0x2851bc4 <Run+8332>, [12] = 0x284fe70 <Run+824>, [13] = 0x284fe70 <Run+824>, [14] = 0x284fe70 <Run+824>, [15] = 0x284fe70 <Run+824>, [16] = 0x2851b54 <Run+8220>, [17] = 0x2851c3c <Run+8452>, [18] = 0x2851afc <Run+8132>, [19] = 0x2851aa4 <Run+8044>, [20] = 0x2851a40 <Run+7944>, [21] = 0x2851bd4 <Run+8348>, [22] = 0x28519e4 <Run+7852>, [23] = 0x2855e48 <Run+25360>, [24] = 0x2855df8 <Run+25280>, [25] = 0x284fe70 <Run+824>, [26] = 0x2856fc8 <Run+29840>, [27] = 0x2855dbc <Run+25220>, [28] = 0x284fe70 <Run+824>, [29] = 0x284fe70 <Run+824>, [30] = 0x284fe70 <Run+824>, [31] = 0x2856698 <Run+27488>, [32] = 0x284fe70 <Run+824>, [33] = 0x284fe70 <Run+824>, [34] = 0x284fe70 <Run+824>, [35] = 0x284fe70 <Run+824>, [36] = 0x284fe70 <Run+824>, [37] = 0x284fe70 <Run+824>, [38] = 0x284fe70 <Run+824>, [39] = 0x284fe70 <Run+824>, [40] = 0x2856628 <Run+27376>, [41] = 0x28566d4 <Run+27548>, [42] = 0x285197c <Run+7748>, [43] = 0x28563d4 <Run+26780>, [44] = 0x2856360 <Run+26664>, [45] = 0x28582c8 <Run+34704>, [46] = 0x28504a4 <Run+2412>, [47] = 0x28504a4 <Run+2412>, [48] = 0x284fe70 <Run+824>, [49] = 0x2857818 <Run+31968>, [50] = 0x284fe70 <Run+824>, [51] = 0x284fe70 <Run+824>, [52] = 0x284fe70 <Run+824>, [53] = 0x284fe70 <Run+824>, [54] = 0x284fe70 <Run+824>, [55] = 0x284fe70 <Run+824>, [56] = 0x2858324 <Run+34796>, [57] = 0x284fe70 <Run+824>, [58] = 0x284fe70 <Run+824>, [59] = 0x284fe70 <Run+824>, [60] = 0x284fe70 <Run+824>, [61] = 0x284fe70 <Run+824>, [62] = 0x284fe70 <Run+824>, [63] = 0x284fe70 <Run+824>, [64] = 0x28577b4 <Run+31868>, [65] = 0x2850ad0 <Run+3992>, [66] = 0x2850a6c <Run+3892>, [67] = 0x2850cbc <Run+4484>, [68] = 0x2850a08 <Run+3792>, [69] = 0x2850874 <Run+3388>, [70] = 0x2850804 <Run+3276>, [71] = 0x2850794 <Run+3164>, [72] = 0x2850730 <Run+3064>, [73] = 0x28586ac <Run+35700>, [74] = 0x2858648 <Run+35600>, [75] = 0x2858aa4 <Run+36716>, [76] = 0x28585e0 <Run+35496>, [77] = 0x2858a3c <Run+36612>, [78] = 0x28589c8 <Run+36496>, [79] = 0x2857028 <Run+29936>, [80] = 0x2856744 <Run+27660>, [81] = 0x2857afc <Run+32708>, [82] = 0x2857a7c <Run+32580>, [83] = 0x28588b0 <Run+36216>, [84] = 0x2857a10 <Run+32472>, [85] = 0x2851e14 <Run+8924>, [86] = 0x2851da8 <Run+8816>, [87] = 0x2851d3c <Run+8708>, [88] = 0x2851ccc <Run+8596>, [89] = 0x2858cf4 <Run+37308>, [90] = 0x2858c8c <Run+37204>, [91] = 0x2858d64 <Run+37420>, [92] = 0x28587cc <Run+35988>, [93] = 0x28575dc <Run+31396>, [94] = 0x285756c <Run+31284>, [95] = 0x2858920 <Run+36328>, [96] = 0x28574ec <Run+31156>, [97] = 0x2858194 <Run+34396>, [98] = 0x2858144 <Run+34316>, [99] = 0x2857fac <Run+33908>, [100] = 0x2857f38 <Run+33792>, [101] = 0x28561e4 <Run+26284>, [102] = 0x285616c <Run+26164>, [103] = 0x2858210 <Run+34520>, [104] = 0x28560d4 <Run+26012>, [105] = 0x2856c50 <Run+28952>, [106] = 0x2856be8 <Run+28848>, [107] = 0x2856cd8 <Run+29088>, [108] = 0x284fe70 <Run+824>, [109] = 0x284fe70 <Run+824>, [110] = 0x2856b8c <Run+28756>, [111] = 0x2856b30 <Run+28664>, [112] = 0x2856ab0 <Run+28536>, [113] = 0x2856a1c <Run+28388>, [114] = 0x2856988 <Run+28240>, [115] = 0x2857cd8 <Run+33184>, [116] = 0x2857c64 <Run+33068>, [117] = 0x2857bec <Run+32948>, [118] = 0x2857b74 <Run+32828>, [119] = 0x2855b04 <Run+24524>, [120] = 0x284fe70 <Run+824>, [121] = 0x284fe70 <Run+824>, [122] = 0x284fe70 <Run+824>, [123] = 0x284fe70 <Run+824>, [124] = 0x284fe70 <Run+824>, [125] = 0x284fe70 <Run+824>, [126] = 0x2855ab4 <Run+24444>, [127] = 0x2858584 <Run+35404>, [128] = 0x2857004 <Run+29900>, [129] = 0x2858dec <Run+37556>, [130] = 0x285883c <Run+36100>, [131] = 0x2858860 <Run+36136>, [132] = 0x2857d64 <Run+33324>, [133] = 0x2857dbc <Run+33412>, [134] = 0x2857d88 <Run+33360>, [135] = 0x2855c20 <Run+24808>, [136] = 0x2855bfc <Run+24772>, [137] = 0x28587a8 <Run+35952>, [138] = 0x2858784 <Run+35916>, [139] = 0x2858eb8 <Run+37760>, [140] = 0x285875c <Run+35876>, [141] = 0x285746c <Run+31028>, [142] = 0x2857434 <Run+30972>, [143] = 0x2858e84 <Run+37708>, [144] = 0x28573dc <Run+30884>, [145] = 0x2858f38 <Run+37888>, [146] = 0x2858bd8 <Run+37024>, [147] = 0x2858c30 <Run+37112>, [148] = 0x2857e70 <Run+33592>, [149] = 0x2855f68 <Run+25648>, [150] = 0x2855efc <Run+25540>, [151] = 0x2857ec8 <Run+33680>, [152] = 0x2855ea4 <Run+25452>, [153] = 0x2858528 <Run+35312>, [154] = 0x28584d0 <Run+35224>, [155] = 0x2858edc <Run+37796>, [156] = 0x2858470 <Run+35128>, [157] = 0x2856828 <Run+27888>, [158] = 0x28567b8 <Run+27776>, [159] = 0x2858e10 <Run+37592>, [160] = 0x2855a9c <Run+24420>, [161] = 0x2856568 <Run+27184>, [162] = 0x2856558 <Run+27168>, [163] = 0x28564e4 <Run+27052>, [164] = 0x28505b4 <Run+2684>, [165] = 0x28505b4 <Run+2684>, [166] = 0x284fe70 <Run+824>, [167] = 0x284fe70 <Run+824>, [168] = 0x2850718 <Run+3040>, [169] = 0x2856608 <Run+27344>, [170] = 0x284fe70 <Run+824>, [171] = 0x2856588 <Run+27216>, [172] = 0x28503c0 <Run+2184>, [173] = 0x28503c0 <Run+2184>, [174] = 0x285122c <Run+5876>, [175] = 0x28511c8 <Run+5776>, [176] = 0x28517a8 <Run+7280>, [177] = 0x2851740 <Run+7176>, [178] = 0x284fe70 <Run+824>, [179] = 0x2851824 <Run+7404>, [180] = 0x284fe70 <Run+824>, [181] = 0x284fe70 <Run+824>, [182] = 0x28515d8 <Run+6816>, [183] = 0x2858b8c <Run+36948>, [184] = 0x284fe70 <Run+824>, [185] = 0x284fe70 <Run+824>, [186] = 0x2858884 <Run+36172>, [187] = 0x2858b08 <Run+36816>, [188] = 0x2857de0 <Run+33448>, [189] = 0x2857290 <Run+30552>, [190] = 0x2857244 <Run+30476>, [191] = 0x2858710 <Run+35800>, [192] = 0x28571cc <Run+30356>, [193] = 0x28579a0 <Run+32360>, [194] = 0x2857914 <Run+32220>, [195] = 0x2858424 <Run+35052>, [196] = 0x28578ac <Run+32116>, [197] = 0x2855d64 <Run+25132>, [198] = 0x2855cbc <Run+24964>, [199] = 0x28583b8 <Run+34944>...}
opcodes66 = {[0] = 0x284fe70 <Run+824>, [1] = 0x2855210 <Run+22232>, [2] = 0x284fe70 <Run+824>, [3] = 0x28551a4 <Run+22124>, [4] = 0x284fe70 <Run+824>, [5] = 0x285517c <Run+22084>, [6] = 0x2855888 <Run+23888>, [7] = 0x28547c4 <Run+19596>, [8] = 0x284fe70 <Run+824>, [9] = 0x2854a8c <Run+20308>, [10] = 0x284fe70 <Run+824>, [11] = 0x2854a28 <Run+20208>, [12] = 0x284fe70 <Run+824>, [13] = 0x2854a08 <Run+20176>, [14] = 0x284fe70 <Run+824>, [15] = 0x28553ec <Run+22708>, [16] = 0x284fe70 <Run+824>, [17] = 0x28549ac <Run+20084>, [18] = 0x284fe70 <Run+824>, [19] = 0x2854e14 <Run+21212>, [20] = 0x284fe70 <Run+824>, [21] = 0x2854dfc <Run+21188>, [22] = 0x284fe70 <Run+824>, [23] = 0x284fe70 <Run+824>, [24] = 0x284fe70 <Run+824>, [25] = 0x28558b4 <Run+23932>, [26] = 0x284fe70 <Run+824>, [27] = 0x2854da0 <Run+21096>, [28] = 0x284fe70 <Run+824>, [29] = 0x28555f0 <Run+23224>, [30] = 0x284fe70 <Run+824>, [31] = 0x284fe70 <Run+824>, [32] = 0x284fe70 <Run+824>, [33] = 0x28546f4 <Run+19388>, [34] = 0x284fe70 <Run+824>, [35] = 0x2854690 <Run+19288>, [36] = 0x284fe70 <Run+824>, [37] = 0x2854670 <Run+19256>, [38] = 0x28553e8 <Run+22704>, [39] = 0x284fe70 <Run+824>, [40] = 0x284fe70 <Run+824>, [41] = 0x2854fa4 <Run+21612>, [42] = 0x284fe70 <Run+824>, [43] = 0x2854f38 <Run+21504>, [44] = 0x284fe70 <Run+824>, [45] = 0x2854f10 <Run+21464>, [46] = 0x284fe24 <Run+748>, [47] = 0x284fe70 <Run+824>, [48] = 0x284fe70 <Run+824>, [49] = 0x2854eac <Run+21364>, [50] = 0x284fe70 <Run+824>, [51] = 0x28547fc <Run+19652>, [52] = 0x284fe70 <Run+824>, [53] = 0x28547dc <Run+19620>, [54] = 0x284fe24 <Run+748>, [55] = 0x284fe70 <Run+824>, [56] = 0x284fe70 <Run+824>, [57] = 0x2854be0 <Run+20648>, [58] = 0x284fe70 <Run+824>, [59] = 0x2854b88 <Run+20560>, [60] = 0x284fe70 <Run+824>, [61] = 0x285589c <Run+23908>, [62] = 0x284fe70 <Run+824>, [63] = 0x284fe70 <Run+824>, [64] = 0x2854b84 <Run+20556>, [65] = 0x28539e8 <Run+16048>, [66] = 0x28539e4 <Run+16044>, [67] = 0x28539e0 <Run+16040>, [68] = 0x28539dc <Run+16036>, [69] = 0x2851e80 <Run+9032>, [70] = 0x284fd24 <Run+492>, [71] = 0x284fd24 <Run+492>, [72] = 0x2854484 <Run+18764>, [73] = 0x28539d8 <Run+16032>, [74] = 0x28539d4 <Run+16028>, [75] = 0x28539d0 <Run+16024>, [76] = 0x28539cc <Run+16020>, [77] = 0x28539c8 <Run+16016>, [78] = 0x284fcfc <Run+452>, [79] = 0x284fcfc <Run+452>, [80] = 0x28539c4 <Run+16012>, [81] = 0x28538cc <Run+15764>, [82] = 0x28538c8 <Run+15760>, [83] = 0x28538c4 <Run+15756>, [84] = 0x28538c0 <Run+15752>, [85] = 0x28539ec <Run+16052>, [86] = 0x284fce4 <Run+428>, [87] = 0x284fce4 <Run+428>, [88] = 0x28539c0 <Run+16008>, [89] = 0x28539bc <Run+16004>, [90] = 0x28539b8 <Run+16000>, [91] = 0x28539b4 <Run+15996>, [92] = 0x28539b0 <Run+15992>, [93] = 0x28539f0 <Run+16056>, [94] = 0x284fccc <Run+404>, [95] = 0x284fccc <Run+404>, [96] = 0x2853948 <Run+15888>, [97] = 0x2853798 <Run+15456>, [98] = 0x284fe70 <Run+824>, [99] = 0x284fe70 <Run+824>, [100] = 0x284fe70 <Run+824>, [101] = 0x284fe70 <Run+824>, [102] = 0x2853794 <Run+15452>, [103] = 0x284fe70 <Run+824>, [104] = 0x2853784 <Run+15436>, [105] = 0x2853718 <Run+15328>, [106] = 0x2853868 <Run+15664>, [107] = 0x28537fc <Run+15556>, [108] = 0x284fe70 <Run+824> <repeats 21 times>, [129] = 0x285033c <Run+2052>, [130] = 0x284fe70 <Run+824>, [131] = 0x285033c <Run+2052>, [132] = 0x284fe70 <Run+824>, [133] = 0x2851520 <Run+6632>, [134] = 0x284fe70 <Run+824>, [135] = 0x28514c8 <Run+6544>, [136] = 0x284fe70 <Run+824>, [137] = 0x28518c0 <Run+7560>, [138] = 0x284fe70 <Run+824>, [139] = 0x2851478 <Run+6464>, [140] = 0x28516ac <Run+7028>, [141] = 0x284fe70 <Run+824>, [142] = 0x2850fb8 <Run+5248>, [143] = 0x2850f6c <Run+5172>, [144] = 0x2850f68 <Run+5168>, [145] = 0x28535ec <Run+15028>, [146] = 0x28535e8 <Run+15024>, [147] = 0x28535e4 <Run+15020>, [148] = 0x28535e0 <Run+15016>, [149] = 0x28535dc <Run+15012>, [150] = 0x284fdec <Run+692>, [151] = 0x284fdec <Run+692>, [152] = 0x28535d0 <Run+15000>, [153] = 0x2853708 <Run+15312>, [154] = 0x284fe70 <Run+824>, [155] = 0x284fe70 <Run+824>, [156] = 0x28536e4 <Run+15276>, [157] = 0x2853690 <Run+15192>, [158] = 0x284fe70 <Run+824>, [159] = 0x284fe70 <Run+824>, [160] = 0x284fe70 <Run+824>, [161] = 0x2853680 <Run+15176>, [162] = 0x284fe70 <Run+824>, [163] = 0x2853670 <Run+15160>, [164] = 0x284fe70 <Run+824>, [165] = 0x2853638 <Run+15104>, [166] = 0x284fe70 <Run+824>, [167] = 0x2853604 <Run+15052>, [168] = 0x284fe70 <Run+824>, [169] = 0x28535f0 <Run+15032>, [170] = 0x284fe70 <Run+824>, [171] = 0x2853ab0 <Run+16248>, [172] = 0x284fe70 <Run+824>, [173] = 0x2853a8c <Run+16212>, [174] = 0x284fe70 <Run+824>, [175] = 0x2853a58 <Run+16160>, [176] = 0x284fe70 <Run+824>, [177] = 0x284fe70 <Run+824>, [178] = 0x284fe70 <Run+824>, [179] = 0x284fe70 <Run+824>, [180] = 0x284fe70 <Run+824>, [181] = 0x284fe70 <Run+824>, [182] = 0x284fe70 <Run+824>, [183] = 0x284fe70 <Run+824>, [184] = 0x2853a44 <Run+16140>, [185] = 0x2853a30 <Run+16120>, [186] = 0x2853a1c <Run+16100>, [187] = 0x2853a08 <Run+16080>, [188] = 0x28539f4 <Run+16060>, [189] = 0x2853aec <Run+16308>, [190] = 0x284fcb8 <Run+384>, [191] = 0x284fcb8 <Run+384>, [192] = 0x284fe70 <Run+824>, [193] = 0x28538d0 <Run+15768>, [194] = 0x284fe70 <Run+824>, [195] = 0x284fe70 <Run+824>, [196] = 0x284fe70 <Run+824>, [197] = 0x284fe70 <Run+824>, [198] = 0x284fe70 <Run+824>, [199] = 0x28506c8 <Run+2960>, [200] = 0x284fe70 <Run+824>, [201] = 0x284fe70 <Run+824>, [202] = 0x284fe70 <Run+824>, [203] = 0x284fe70 <Run+824>, [204] = 0x284fe70 <Run+824>, [205] = 0x284fe70 <Run+824>, [206] = 0x284fe70 <Run+824>, [207] = 0x284fe70 <Run+824>, [208] = 0x284fe70 <Run+824>, [209] = 0x285042c <Run+2292>, [210] = 0x284fe70 <Run+824>...}
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
sib = <optimized out>
base = <optimized out>
base = <optimized out>
sib = <optimized out>
#12 0x028101ac in main (argc=<optimized out>, argv=<optimized out>, env=<optimized out>) at /mnt/crypt1/projects/builds/box86/src/main.c:993
prog = 0xffe1d4e6 "./test01"
nextarg = <optimized out>
ld_preload = {
size = 0,
cap = 0,
paths = 0x0
}
prgname = <optimized out>
f = <optimized out>
elf_header = 0x3bdf698
emu = 0x3bde690
ret = <optimized out>
>>> x/10i $pc-32
0xf79af67c <__GI___nanosleep+4>: ldr r2, [pc, #164] ; 0xf79af728 <__GI___nanosleep+176>
0xf79af680 <__GI___nanosleep+8>: add r3, pc, r3
0xf79af684 <__GI___nanosleep+12>: push {r4, r5, r7, lr}
0xf79af688 <__GI___nanosleep+16>: ldr r3, [r3, r2]
0xf79af68c <__GI___nanosleep+20>: ldr r3, [r3]
0xf79af690 <__GI___nanosleep+24>: cmp r3, #0
0xf79af694 <__GI___nanosleep+28>: bne 0xf79af6b4 <__GI___nanosleep+60>
0xf79af698 <__GI___nanosleep+32>: mov r7, #162 ; 0xa2
=> 0xf79af69c <__GI___nanosleep+36>: svc 0x00000000
0xf79af6a0 <__GI___nanosleep+40>: cmn r0, #4096 ; 0x1000
>>>

Apologies for misunderstanding the 'live debugging' as remote debugging before.
I'll continue my gdb experimentation and report back when I have something useful to share :)
 
No pb. The live gdb session could be a solution, but I don't think we need to setup that at this point.

So you built box86t, ok. But for the Dynrec Dump to use it, you need to add BOX86_TRACE=0x0-0x1 to enable zydis trace but without tracing anything (I know, it's not ideal).

Good luck with gdb.
 
Ah yes - getting different output now, although despite having built and installed Zydis it now mentions being unable to find libZydis.so. No matter - I'll look into that later, for now I'll focus on the gdb adventure.
Thanks again for your understanding and patience :)
 
@ptitSeb - top of the morning; progress report - sad to say I haven't narrowed it down yet. I now know that the segfault occurs somewhere after 32 s and 3.100.000 si steps - but I haven't found the culprit yet. All in all a most humbling and educational experience - I wasted quite a bit of time going step by step before realising that I should start with much larger strokes and then narrowing it down from there :$ xD

This is the output of s 33 - post crash, sadly without the erroneous message we're looking for I reckon. I tried record on gdb as well by the way - but that crashed gdb much sooner with a 'function {address} not supported by record.

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
GetDynablocksFromAddress(0xf7968008, 0x2baafa4) => (nil) (0xcc / 0x53)
Emitting 40 bytes for 7 x86 bytes
0x2baafa4: Exit x86emu
0xf6d67900: 5 emited opcodes, state=1/1, set=3F, use=0, need=3F
Exit x86 Emu
e30acfa7 MOVW r12, #0xafa7
e340c2ba MOVT r12, #0x2ba
e8801ff0 STM r0, {r4-r12}
e3001001 MOVW r1, #0x1
e5801358 STR r1, [r0, #856]
Jump to epilog
e30acfa4 MOVW r12, #0xafa4
e340c2ba MOVT r12, #0x2ba
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (1, 0 sons)
--- DynaRec Block created @0x2baafa4:0x2baafab (0xf6d67900, 0x28 bytes, with 0 son(s))
Running DynaRec Block @0x2baafa4 (0xf6d67900) of 1 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8
Transfert to main(1, 0x2bb14e0, 0x2bb18c8)=>0x804843b from __libc_start_main
GetDynablocksFromAddress(0xf7968008, 0x804843b) => 0x2bb67e8 (0x8d / 0x4c)
Emitting 584 bytes for 120 x86 bytes ( => ./test01/main)
0x804843b: 8D 4C 24 04 LEA Gd, Ed
0xf6d67a00: 1 emited opcodes, state=0/0, set=0, use=0, need=0
e2885004 ADD r5, r8, #0x4
0x804843f: 83 E4 F0 AND Ed, Ib
0xf6d67a04: 3 emited opcodes, state=1/0, set=3F, use=0, need=0
e30f3ff0 MOVW r3, #0xfff0
e34f3fff MOVT r3, #0xffff
e0088003 AND r8, r8, r3
0x8048442: FF 71 FC PUSH Ed
0xf6d67a10: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e5151004 LDR r1, [r5, #-4]
e9280002 STMDB r8!, {r1}
0x8048445: 55 PUSH reg
0xf6d67a18: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280200 STMDB r8!, {r9}
0x8048446: 89 E5 MOV Ed, Gd
0xf6d67a1c: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e1a09008 MOV r9, r8
0x8048448: 56 PUSH reg
0xf6d67a20: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280400 STMDB r8!, {r10}
0x8048449: 53 PUSH reg
0xf6d67a24: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280080 STMDB r8!, {r7}
0x804844a: 51 PUSH reg
0xf6d67a28: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e9280020 STMDB r8!, {r5}
0x804844b: 83 EC 3C SUB Ed, Ib
0xf6d67a2c: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e248803c SUB r8, r8, #0x3c
0x804844e: 89 C8 MOV Ed, Gd
0xf6d67a30: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e1a04005 MOV r4, r5
0x8048450: 8B 40 04 MOV Gd, Ed
0xf6d67a34: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e5944004 LDR r4, [r4, #4]
0x8048453: 89 45 C4 MOV Ed, Gd
0xf6d67a38: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e509403c STR r4, [r9, #-60]
0x8048456: 65 A1 14 00 00 00 MOV EAX, GS:Id
0xf6d67a3c: 8 emited opcodes, state=0/1, set=0, use=0, need=0
Get TLSData
e3001005 MOVW r1, #0x5
e92d0001 PUSH {r0}
e302ca8c MOVW r12, #0x2a8c
e340c288 MOVT r12, #0x288
e12fff3c BLX r12
e1a01000 MOV r1, r0
e8bd0001 POP {r0}
----TLSData
e5914014 LDR r4, [r1, #20]
0x804845c: 89 45 E4 MOV Ed, Gd
0xf6d67a5c: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e509401c STR r4, [r9, #-28]
0x804845f: 31 C0 XOR Ed, Gd
0xf6d67a60: 1 emited opcodes, state=1/1, set=3F, use=0, need=0
e0244004 EOR r4, r4, r4
0x8048461: C7 45 D6 48 65 6C 6C MOV Ed, Id
0xf6d67a64: 3 emited opcodes, state=0/1, set=0, use=0, need=0
e3063548 MOVW r3, #0x6548
e3463c6c MOVT r3, #0x6c6c
e509302a STR r3, [r9, #-42]
0x8048468: C7 45 DA 6F 20 57 6F MOV Ed, Id
0xf6d67a70: 3 emited opcodes, state=0/1, set=0, use=0, need=0
e302306f MOVW r3, #0x206f
e3463f57 MOVT r3, #0x6f57
e5093026 STR r3, [r9, #-38]
0x804846f: C7 45 DE 72 6C 64 21 MOV Ed, Id
0xf6d67a7c: 3 emited opcodes, state=0/1, set=0, use=0, need=0
e3063c72 MOVW r3, #0x6c72
e3423164 MOVT r3, #0x2164
e5093022 STR r3, [r9, #-34]
0x8048476: 66 C7 45 E2 0A 00 MOV Ew, Iw
0xf6d67a88: 2 emited opcodes, state=0/1, set=0, use=0, need=0
e300100a MOVW r1, #0xa
e14911be STRH r1, [r9, #-30]
0x804847c: 8D 75 D6 LEA Gd, Ed
0xf6d67a90: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e249a02a SUB r10, r9, #0x2a
0x804847f: B8 04 00 00 00 MOV Reg, Id
0xf6d67a94: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e3004004 MOVW r4, #0x4
0x8048484: BB 01 00 00 00 MOV Reg, Id
0xf6d67a98: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e3007001 MOVW r7, #0x1
0x8048489: 89 F1 MOV Ed, Gd
0xf6d67a9c: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e1a0500a MOV r5, r10
0x804848b: BA 0D 00 00 00 MOV Reg, Id
0xf6d67aa0: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e300600d MOVW r6, #0xd
0x8048490: CD 80 Syscall
0xf6d67aa4: 18 emited opcodes, state=1/1, set=3F, use=0, need=0
e308c492 MOVW r12, #0x8492
e340c804 MOVT r12, #0x804
e8801ff0 STM r0, {r4-r12}
e92d0001 PUSH {r0}
e3023d60 MOVW r3, #0x2d60
e3403288 MOVT r3, #0x288
e12fff33 BLX r3
e8bd0001 POP {r0}
e8901ff0 LDM r0, {r4-r12}
e3082492 MOVW r2, #0x8492
e15c0002 CMP r12, r2
1a000002 BNE +4
e5901358 LDR r1, [r0, #856]
e3510001 CMP r1, #0x1
1a000002 BNE +4
Jump to epilog
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
0x8048492: B8 00 00 00 00 MOV Reg, Id
0xf6d67aec: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e3004000 MOVW r4, #0x0
0x8048497: 8B 55 E4 MOV Gd, Ed
0xf6d67af0: 1 emited opcodes, state=0/1, set=0, use=0, need=0
e519601c LDR r6, [r9, #-28]
0x804849a: 65 33 15 14 00 00 00 XOR Gd, GS:Ed
0xf6d67af4: 15 emited opcodes, state=1/1, set=3F, use=0, need=8
Get TLSData
e3001005 MOVW r1, #0x5
e92d0001 PUSH {r0}
e302ca8c MOVW r12, #0x2a8c
e340c288 MOVT r12, #0x288
e12fff3c BLX r12
e1a0c000 MOV r12, r0
e8bd0001 POP {r0}
----TLSData
e3002014 MOVW r2, #0x14
e792100c LDR r1, [r2, r12]
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e0366001 EORS r6, r6, r1
e3003000 MOVW r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
0x80484a1: 74 05 JZ ib
0xf6d67b30: 3 emited opcodes, state=0/1, set=0, use=8, need=0
e590203c LDR r2, [r0, #60]
e3520001 CMP r2, #0x1
0a000013 BEQ +21
----> potential Son here
0x80484a3: E8 68 FE FF FF CALL Id (=> ./test01/ + 16)
0xf6d67b3c: 20 emited opcodes, state=1/0, set=3F, use=0, need=0
CStack PUSH 0x80484a8/0xf6d67b8c-----
e5902374 LDR r2, [r0, #884]
e3001378 MOVW r1, #0x378
e3100004 TST r0, #0x4
12811004 ADDNE r1, r1, #0x4
e0811182 ADD r1, r1, r2, lsl #3
e2822001 ADD r2, r2, #0x1
e202201f AND r2, r2, #0x1f
e5802374 STR r2, [r0, #884]
e30824a8 MOVW r2, #0x84a8
e3402804 MOVT r2, #0x804
e3073b8c MOVW r3, #0x7b8c
e34f36d6 MOVT r3, #0xf6d6
e18020f1 STRD r2, r3, [r0, r1]
--------------CStack PUSH
e9280004 STMDB r8!, {r2}
Jump to linker (#0) nolinker=0
e308c310 MOVW r12, #0x8310
e340c804 MOVT r12, #0x804
e3021c60 MOVW r1, #0x2c60
e34012bc MOVT r1, #0x2bc
e5912000 LDR r2, [r1, #0]
e12fff12 BX r2
----> potential Son here
0x80484a8: 83 C4 3C ADD Ed, Ib
0xf6d67b8c: 27 emited opcodes, state=1/0, set=3F, use=0, need=3F
e300c000 MOVW r12, #0x0
e580c2fc STR r12, [r0, #764]
e388303c ORR r3, r8, #0x3c
e208c03c AND r12, r8, #0x3c
e298803c ADDS r8, r8, #0x3c
e1c33008 BIC r3, r3, r8
e183300c ORR r3, r3, r12
e7e0c1d3 UBFX r12, r3, #3, #1
e580c034 STR r12, [r0, #52]
13003000 MOVWNE r3, #0x0
03003001 MOVWEQ r3, #0x1
e580303c STR r3, [r0, #60]
2300c001 MOVWCS r12, #0x1
3300c000 MOVWCC r12, #0x0
e580c024 STR r12, [r0, #36]
7300c000 MOVWVC r12, #0x0
6300c001 MOVWVS r12, #0x1
e580c050 STR r12, [r0, #80]
e7e03fd8 UBFX r3, r8, #31, #1
e5803040 STR r3, [r0, #64]
e20830e0 AND r3, r8, #0xe0
e590c30c LDR r12, [r0, #780]
e79cc1a3 LDR r12, [r12, r3, lsr #3]
e208301f AND r3, r8, #0x1f
e1e0c33c MVN r12, r12, lsr r3
e20cc001 AND r12, r12, #0x1
e580c02c STR r12, [r0, #44]
0x80484ab: 59 POP reg
0xf6d67bf8: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80020 LDM r8!, {r5}
0x80484ac: 5B POP reg
0xf6d67bfc: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80080 LDM r8!, {r7}
0x80484ad: 5E POP reg
0xf6d67c00: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80400 LDM r8!, {r10}
0x80484ae: 5D POP reg
0xf6d67c04: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e8b80200 LDM r8!, {r9}
0x80484af: 8D 61 FC LEA Gd, Ed
0xf6d67c08: 1 emited opcodes, state=0/1, set=0, use=0, need=3F
e2458004 SUB r8, r5, #0x4
0x80484b2: C3 RET
0xf6d67c0c: 15 emited opcodes, state=0/1, set=0, use=1000, need=3F
Ret epilog
e8b81000 LDM r8!, {r12}
CStack POP----------------
e5901374 LDR r1, [r0, #884]
e2411001 SUB r1, r1, #0x1
e201101f AND r1, r1, #0x1f
e5801374 STR r1, [r0, #884]
e3002378 MOVW r2, #0x378
e3100004 TST r0, #0x4
12822004 ADDNE r2, r2, #0x4
e0821181 ADD r1, r2, r1, lsl #3
e18020d1 LDRD r2, r3, [r0, r1]
e15c0002 CMP r12, r2
012fff13 BXEQ r3
----------------CStack POP
e3072890 MOVW r2, #0x7890
e3402290 MOVT r2, #0x290
e12fff12 BX r2
---- END OF BLOCK ---- (37, 2 sons)
--- DynaRec Block created @0x804843b:0x80484b3 (0xf6d67a00, 0x248 bytes, with 2 son(s))
Running DynaRec Block @0x804843b (0xf6d67a00) of 37 x86 insts (nolinker=0, father=(nil)) emu=0x2bb36d8

Program received signal SIGSEGV, Segmentation fault.
0x02882a94 in GetSegmentBaseEmu (emu=0x2bb36d8, seg=-153716224) at /mnt/crypt1/projects/builds/box86/src/emu/x86run_private.c:747
747 if(!emu->segs_clean[seg] || seg==_GS) {
1: x/i $pc
=> 0x2882a94 <GetSegmentBaseEmu+8>: ldr r3, [r4, #832] ; 0x340
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
~
~
~
0x02882a8c GetSegmentBaseEmu+0 str r4, [sp, #-8]!
0x02882a90 GetSegmentBaseEmu+4 add r4, r0, r1, lsl #2
0x02882a94 GetSegmentBaseEmu+8 ldr r3, [r4, #832] ; 0x340
0x02882a98 GetSegmentBaseEmu+12 str lr, [sp, #4]
0x02882a9c GetSegmentBaseEmu+16 cmp r1, #5
0x02882aa0 GetSegmentBaseEmu+20 cmpne r3, #0
0x02882aa4 GetSegmentBaseEmu+24 bne 0x2882abc <GetSegmentBaseEmu+48>
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] break at 0x02893a20 in /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87 for dynarec.c:87 hit 3 times
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x02bb36d8 r1 0xf6d67a00 r2 0x00000001 r3 0x00000000 r4 0xde151ed8 r5 0xf79663c0 r6 0x00000000 r7 0x02bb14e0 r8 0xf796638c r9 0x00000000 r10 0x00000001
r11 0x00000000 r12 0x02882a8c sp 0xfffeee28 lr 0xf6d67a50 pc 0x02882a94 cpsr 0x60000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
742 #undef GOC
743 }
744
745 uintptr_t GetSegmentBaseEmu(x86emu_t* emu, int seg)
746 {
747 if(!emu->segs_clean[seg] || seg==_GS) {
748 emu->segs_offs[seg] = (uintptr_t)GetSegmentBase(emu->segs[seg]);
749 emu->segs_clean[seg] = 1;
750 }
751 return emu->segs_offs[seg];
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0x02882a94 in GetSegmentBaseEmu+8 at /mnt/crypt1/projects/builds/box86/src/emu/x86run_private.c:747
[1] from 0x00000000
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 4759 name box86 from 0x02882a94 in GetSegmentBaseEmu+8 at /mnt/crypt1/projects/builds/box86/src/emu/x86run_private.c:747
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
arg emu = 0x2bb36d8: {regs = {[0] = {sdword = {[0] = 0}, dword = {[0] = 0}, sword = {[0] = 0, [1] =…, seg = -153716224
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>>

Nice video and exposure for the project by the way - and quite surprising that Zoom still supports i386 with their client, that's good news to be sure. :)
 
Last edited:
It's starting to look like the gdb trace is stuck in an infinite loop.. If I let the program run normally in gdb - the segfault always occurs before the 4th hit of the breakpoint but when going through the process in si steps it makes it (more than a million steps) past the 4th hit. Whether a single, 10, 100, 10.000 or even a million steps are taken afterwards - it will always return to one of two points specified in the spoilers below... even when taking regular s steps afterwards (which would have surely produced the segfault when running through the trace in s rather than si steps).

─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0x0281247c 182 free(dynmap);
1: x/i $pc
=> 0x281247c <cleanDBFromAddressRange+256>: add r4, r4, #1
2: x/i $pc
=> 0x281247c <cleanDBFromAddressRange+256>: add r4, r4, #1
3: x/i $pc
=> 0x281247c <cleanDBFromAddressRange+256>: add r4, r4, #1
4: x/i $pc
=> 0x281247c <cleanDBFromAddressRange+256>: add r4, r4, #1
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0x02812468 cleanDBFromAddressRange+236 str r3, [r5, #4]
0x0281246c cleanDBFromAddressRange+240 bl 0x2902c6c <FreeDynablockList>
0x02812470 cleanDBFromAddressRange+244 mov r0, r9
0x02812474 cleanDBFromAddressRange+248 bl 0x280ef5c <free@plt>
0x02812478 cleanDBFromAddressRange+252 cmp r8, r4
0x0281247c cleanDBFromAddressRange+256 add r4, r4, #1
0x02812480 cleanDBFromAddressRange+260 beq 0x2812508 <cleanDBFromAddressRange+396>
0x02812484 cleanDBFromAddressRange+264 ldr r3, [r11]
0x02812488 cleanDBFromAddressRange+268 add r5, r4, #144 ; 0x90
0x0281248c cleanDBFromAddressRange+272 lsl r5, r5, #2
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] break at 0x02893a20 in /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87 for dynarec.c:87 hit 4 times
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x00000007 r1 0x00000000 r2 0xcab9ab00 r3 0xf7a0666c r4 0x00027909 r5 0x0009e664 r6 0xfffffffe r7 0x00000000 r8 0x000fffff r9 0x00000000 r10 0x08048000
r11 0x02bab5a0 r12 0x00000000 sp 0xfffef150 lr 0x02bb67d8 pc 0x0281247c cpsr 0x20000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
177 if(endaddr>enddb) endaddr = enddb;
178 if(startaddr==startdb && endaddr==enddb) {
179 if(destroy) {
180 my_context->dynmap = NULL;
181 FreeDynablockList(&dynmap->dynablocks);
182 free(dynmap);
183 } else
184 MarkDynablockList(&dynmap->dynablocks);
185 } else
186 if(destroy)
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0x0281247c in cleanDBFromAddressRange+256 at /mnt/crypt1/projects/builds/box86/src/box86context.c:182
[1] from 0x02812c14 in FreeBox86Context+528 at /mnt/crypt1/projects/builds/box86/src/box86context.c:383
[2] from 0x028108e8 in endBox86+116 at /mnt/crypt1/projects/builds/box86/src/main.c:654
[3] from 0x028108e8 in endBox86+148 at /mnt/crypt1/projects/builds/box86/src/main.c:640
[4] from 0xf7d99670 in __run_exit_handlers+424 at exit.c:108
[5] from 0xf7d99798 in __GI_exit+24 at exit.c:139
[6] from 0xf7d8271c in __libc_start_main+272 at libc-start.c:342
[7] from 0x02810738 in _start
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 4782 name box86 from 0x0281247c in cleanDBFromAddressRange+256 at /mnt/crypt1/projects/builds/box86/src/box86context.c:182
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
arg addr = 0, size = 4294967295, destroy = 45007584
loc i = 162057, idx = <optimized out>, end = 1048575
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>>



─── Output/messages ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
172 uintptr_t startdb = StartDynablockList(dynmap->dynablocks);
1: x/i $pc
=> 0x2812484 <cleanDBFromAddressRange+264>: ldr r3, [r11]
2: x/i $pc
=> 0x2812484 <cleanDBFromAddressRange+264>: ldr r3, [r11]
3: x/i $pc
=> 0x2812484 <cleanDBFromAddressRange+264>: ldr r3, [r11]
4: x/i $pc
=> 0x2812484 <cleanDBFromAddressRange+264>: ldr r3, [r11]
─── Assembly ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
0x02812470 cleanDBFromAddressRange+244 mov r0, r9
0x02812474 cleanDBFromAddressRange+248 bl 0x280ef5c <free@plt>
0x02812478 cleanDBFromAddressRange+252 cmp r8, r4
0x0281247c cleanDBFromAddressRange+256 add r4, r4, #1
0x02812480 cleanDBFromAddressRange+260 beq 0x2812508 <cleanDBFromAddressRange+396>
0x02812484 cleanDBFromAddressRange+264 ldr r3, [r11]
0x02812488 cleanDBFromAddressRange+268 add r5, r4, #144 ; 0x90
0x0281248c cleanDBFromAddressRange+272 lsl r5, r5, #2
0x02812490 cleanDBFromAddressRange+276 add r3, r3, r5
0x02812494 cleanDBFromAddressRange+280 ldr r9, [r3, #4]
─── Breakpoints ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] break at 0x02893a20 in /mnt/crypt1/projects/builds/box86/src/dynarec/dynarec.c:87 for dynarec.c:87 hit 4 times
─── Expressions ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── History ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Memory ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
─── Registers ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
r0 0x00000007 r1 0x00000000 r2 0xcab9ab00 r3 0xf7a06648 r4 0x00027901 r5 0x0009e640 r6 0xfffffffe r7 0x00000000 r8 0x000fffff r9 0x00000000 r10 0x08048000
r11 0x02bab5a0 r12 0x00000000 sp 0xfffef150 lr 0x02bb67d8 pc 0x02812484 cpsr 0x20000010 fpscr 0x00000010
─── Source ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
167 uintptr_t idx = (addr>box86_dynarec_largest && !destroy)?((addr-box86_dynarec_largest)>>DYNAMAP_SHIFT):(addr>>DYNAMAP_SHIFT);
168 uintptr_t end = ((addr+size-1)>>DYNAMAP_SHIFT);
169 for (uintptr_t i=idx; i<=end; ++i) {
170 dynmap_t* dynmap = my_context->dynmap;
171 if(dynmap) {
172 uintptr_t startdb = StartDynablockList(dynmap->dynablocks);
173 uintptr_t enddb = EndDynablockList(dynmap->dynablocks);
174 uintptr_t startaddr = addr;
175 if(startaddr<startdb) startaddr = startdb;
176 uintptr_t endaddr = addr + size - 1;
─── Stack ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[0] from 0x02812484 in cleanDBFromAddressRange+264 at /mnt/crypt1/projects/builds/box86/src/box86context.c:172
[1] from 0x02812c14 in FreeBox86Context+528 at /mnt/crypt1/projects/builds/box86/src/box86context.c:383
[2] from 0x028108e8 in endBox86+116 at /mnt/crypt1/projects/builds/box86/src/main.c:654
[3] from 0x028108e8 in endBox86+148 at /mnt/crypt1/projects/builds/box86/src/main.c:640
[4] from 0xf7d99670 in __run_exit_handlers+424 at exit.c:108
[5] from 0xf7d99798 in __GI_exit+24 at exit.c:139
[6] from 0xf7d8271c in __libc_start_main+272 at libc-start.c:342
[7] from 0x02810738 in _start
─── Threads ───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
[1] id 4782 name box86 from 0x02812484 in cleanDBFromAddressRange+264 at /mnt/crypt1/projects/builds/box86/src/box86context.c:172
─── Variables ─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
arg addr = 0, size = 4294967295, destroy = 45007584
loc dynmap = <optimized out>, i = 162049, idx = <optimized out>, end = 1048575
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
>>>

 
I just realised that I've been hogging this forum with this issue. :$ Apologies to everyone - I shall move the issue to Github where it belongs and leave this forum for conveying messages, posting happy test reports and sharing Box86 exposure :)
 
So, it appear that, using step by step, the program complete? In you stack trace, I see for example " FreeBox86Context " that is a function called when cleaning up things to quit.

So the issue may involve multitasking somehow.
 
@ptitSeb - that does indeed seem to be the case, something to do with the way threading is done. When I try to record the gdb session - it seemed like it also crashed during a thread management moment.
 
@nomadicus github may be the better place for it to ensure that other raspi users find the history from your debug efforts. However I, personally, am happy to see it all in this thread. I have nothing to contribute yet but enjoy reading and learning from the discussion. This forum is all about tinkering/testing/debugging, so post as much of that as you want IMHO.

Once thousands of Pyras are delivered, there will be an influx of Box86 users on this forum who may benefit from this.
 
@edgex004 - Well I originally mainly signed on to give thanks and praise to ptitSeb and mention an issue or two - which then became a debugging adventure. I just thought that 2 pages on the same topic was becoming a bit too much for this thread (especially as the solution hasn't quite been found yet). There are another 32+ messages in continuation of this topic on issue #216 of Box86' github page. I was getting worried that people might start to think - 'dude enough already!' But I shall compromise and post updates here while the bulk (of this issue) will be on Github - other than that I shall happily share any other test results, use-cases and the like :)

The issue itself is not specific to the Raspberry Pi though as it pertains to the containerisation part of systemd which any Pyra and OpenPandora user could also set up if they so desired. Although Pyra users will more likely initially run Box86 on the host OS - I think that in the future Pyra users may very well start containerising Box86 when upgraded CPU boards become available. I shall also become a Pyra owner at some point :)

To be continued - and thank you for the encouragement :))
 
You must log in or register to reply here.

Similar threads

P
Box86 Error (loading libs) on rasp 4
Replies
13
Views
4K
pgroessw
P
Z
problems with box86 using direct path on raspberry pi
Replies
9
Views
6K
FBnil
FBnil
ptitSeb
Release Airline Tycoon Deluxe
Replies
13
Views
6K
Farox
Farox
ptitSeb
Release Eric's Ultimate Solitaire Demo
Replies
1
Views
3K
FBnil
FBnil
ptitSeb
Using Box86 on the Pyra
Replies
16
Views
3K
matzesu
matzesu
Back
Top