Hi, I tried out this patch, but I noticed that it still gets jalr with a (zero) register base wrong: 40003764: 454000e7 jalr 1108(zero) # 0 <_NULL> The address here is obviously 1108 (0x454), not 0; there is a symbol at address 0x454: 00000454 T memcpy -hpa