c: e1a0c00d mov ip, sp          /* 将sp的值保存起来，这里的ip寄存器其实是R12 */

  10: e92dd800 stmdb sp!, {fp, ip, lr, pc} /* 先将pc，lr，ip, fp 寄存器的值压入栈 */

  14: e24cb004 sub fp, ip, #4 ; 0x4 

  18: e3a02456 mov r2, #1442840576 ; 0x56000000    /* 下面的汇编语言就是操作GPF的寄存器的操作了 */

  1c: e2822050 add r2, r2, #80 ; 0x50

  20: e3a03456 mov r3, #1442840576 ; 0x56000000

  24: e2833050 add r3, r3, #80 ; 0x50

  28: e5933000 ldr r3, [r3]

  2c: e3c33c03 bic r3, r3, #768 ; 0x300

  30: e5823000 str r3, [r2]                       

  34: e3a02456 mov r2, #1442840576 ; 0x56000000

  38: e2822050 add r2, r2, #80 ; 0x50

  3c: e3a03456 mov r3, #1442840576 ; 0x56000000

  40: e2833050 add r3, r3, #80 ; 0x50

  44: e5933000 ldr r3, [r3]

  48: e3833c01 orr r3, r3, #256 ; 0x100

  4c: e5823000 str r3, [r2]

  50: e3a02456 mov r2, #1442840576 ; 0x56000000

  54: e2822054 add r2, r2, #84 ; 0x54

  58: e3a03456 mov r3, #1442840576 ; 0x56000000

  5c: e2833054 add r3, r3, #84 ; 0x54

  60: e5933000 ldr r3, [r3]

  64: e3c33010 bic r3, r3, #16 ; 0x10

  68: e5823000 str r3, [r2]

  6c: eafffffe b 6c     /* 死循环 */

Disassembly of section .comment:

00000000 <.comment>:

   0: 43434700 cmpmi r3, #0 ; 0x0

   4: 4728203a undefined

   8: 2029554e eorcs r5, r9, lr, asr #10

   c: 2e342e33 mrccs 14, 1, r2, cr4, cr3, {1}

  10: Address 0x10 is out of bounds.

四、实验现象

实验现象也是点亮一盏LED灯，就不贴图上来了。