The value loaded into SP is IN the location at PC+808... look there. > About in 0xc1080078+0x0328 give or take a word. > And well, the location is mentioned right behind the ; c1080078: e59fd328 ldr sp, [pc, #808] ; c10803a8 <fiq+0x48> Reinhard