Index: lib/Transforms/IPO/PartialInlining.cpp
===================================================================
--- lib/Transforms/IPO/PartialInlining.cpp
+++ lib/Transforms/IPO/PartialInlining.cpp
@@ -224,10 +224,8 @@
   struct FunctionCloner {
     // Two constructors, one for single region outlining, the other for
     // multi-region outlining.
-    FunctionCloner(Function *F, FunctionOutliningInfo *OI,
-                   OptimizationRemarkEmitter &ORE);
-    FunctionCloner(Function *F, FunctionOutliningMultiRegionInfo *OMRI,
-                   OptimizationRemarkEmitter &ORE);
+    FunctionCloner(Function *F, FunctionOutliningInfo *OI);
+    FunctionCloner(Function *F, FunctionOutliningMultiRegionInfo *OMRI);
     ~FunctionCloner();
 
     // Prepare for function outlining: making sure there is only
@@ -236,14 +234,14 @@
     void NormalizeReturnBlock();
 
     // Do function outlining for cold regions.
-    bool doMultiRegionFunctionOutlining();
+    bool doMultiRegionFunctionOutlining(OptimizationRemarkEmitter &ORE);
     // Do function outlining for region after early return block(s).
     // NOTE: For vararg functions that do the vararg handling in the outlined
     //       function, we temporarily generate IR that does not properly
     //       forward varargs to the outlined function. Calling InlineFunction
     //       will update calls to the outlined functions to properly forward
     //       the varargs.
-    Function *doSingleRegionFunctionOutlining();
+    Function *doSingleRegionFunctionOutlining(OptimizationRemarkEmitter &ORE);
 
     Function *OrigFunc = nullptr;
     Function *ClonedFunc = nullptr;
@@ -262,7 +260,6 @@
     // ClonedOMRI is specific to outlining cold regions.
     std::unique_ptr<FunctionOutliningMultiRegionInfo> ClonedOMRI = nullptr;
     std::unique_ptr<BlockFrequencyInfo> ClonedFuncBFI = nullptr;
-    OptimizationRemarkEmitter &ORE;
   };
 
 private:
@@ -337,7 +334,7 @@
 
   std::unique_ptr<FunctionOutliningInfo> computeOutliningInfo(Function *F);
   std::unique_ptr<FunctionOutliningMultiRegionInfo>
-  computeOutliningColdRegionsInfo(Function *F);
+  computeOutliningColdRegionsInfo(Function *F, OptimizationRemarkEmitter &ORE);
 };
 
 struct PartialInlinerLegacyPass : public ModulePass {
@@ -389,7 +386,8 @@
 } // end anonymous namespace
 
 std::unique_ptr<FunctionOutliningMultiRegionInfo>
-PartialInlinerImpl::computeOutliningColdRegionsInfo(Function *F) {
+PartialInlinerImpl::computeOutliningColdRegionsInfo(
+    Function *F, OptimizationRemarkEmitter &ORE) {
   BasicBlock *EntryBlock = &F->front();
 
   DominatorTree DT(*F);
@@ -403,8 +401,6 @@
   } else
     BFI = &(*GetBFI)(*F);
 
-  auto &ORE = (*GetORE)(*F);
-
   // Return if we don't have profiling information.
   if (!PSI->hasInstrumentationProfile())
     return std::unique_ptr<FunctionOutliningMultiRegionInfo>();
@@ -970,8 +966,8 @@
 }
 
 PartialInlinerImpl::FunctionCloner::FunctionCloner(
-    Function *F, FunctionOutliningInfo *OI, OptimizationRemarkEmitter &ORE)
-    : OrigFunc(F), ORE(ORE) {
+    Function *F, FunctionOutliningInfo *OI)
+    : OrigFunc(F) {
   ClonedOI = llvm::make_unique<FunctionOutliningInfo>();
 
   // Clone the function, so that we can hack away on it.
@@ -993,9 +989,8 @@
 }
 
 PartialInlinerImpl::FunctionCloner::FunctionCloner(
-    Function *F, FunctionOutliningMultiRegionInfo *OI,
-    OptimizationRemarkEmitter &ORE)
-    : OrigFunc(F), ORE(ORE) {
+    Function *F, FunctionOutliningMultiRegionInfo *OI)
+    : OrigFunc(F) {
   ClonedOMRI = llvm::make_unique<FunctionOutliningMultiRegionInfo>();
 
   // Clone the function, so that we can hack away on it.
@@ -1104,7 +1099,8 @@
   }
 }
 
-bool PartialInlinerImpl::FunctionCloner::doMultiRegionFunctionOutlining() {
+bool PartialInlinerImpl::FunctionCloner::doMultiRegionFunctionOutlining(
+    OptimizationRemarkEmitter &ORE) {
 
   auto ComputeRegionCost = [](SmallVectorImpl<BasicBlock *> &Region) {
     int Cost = 0;
@@ -1177,8 +1173,8 @@
   return !OutlinedFunctions.empty();
 }
 
-Function *
-PartialInlinerImpl::FunctionCloner::doSingleRegionFunctionOutlining() {
+Function *PartialInlinerImpl::FunctionCloner::doSingleRegionFunctionOutlining(
+    OptimizationRemarkEmitter &ORE) {
   // Returns true if the block is to be partial inlined into the caller
   // (i.e. not to be extracted to the out of line function)
   auto ToBeInlined = [&, this](BasicBlock *BB) {
@@ -1270,16 +1266,16 @@
   if (F->user_begin() == F->user_end())
     return {false, nullptr};
 
-  auto &ORE = (*GetORE)(*F);
 
   // Only try to outline cold regions if we have a profile summary, which
   // implies we have profiling information.
   if (PSI->hasProfileSummary() && F->hasProfileData() &&
       !DisableMultiRegionPartialInline) {
+    auto &ORE = (*GetORE)(*F);
     std::unique_ptr<FunctionOutliningMultiRegionInfo> OMRI =
-        computeOutliningColdRegionsInfo(F);
+        computeOutliningColdRegionsInfo(F, ORE);
     if (OMRI) {
-      FunctionCloner Cloner(F, OMRI.get(), ORE);
+      FunctionCloner Cloner(F, OMRI.get());
 
 #ifndef NDEBUG
       if (TracePartialInlining) {
@@ -1288,7 +1284,7 @@
                << "\n";
       }
 #endif
-      bool DidOutline = Cloner.doMultiRegionFunctionOutlining();
+      bool DidOutline = Cloner.doMultiRegionFunctionOutlining(ORE);
 
       if (DidOutline) {
 #ifndef NDEBUG
@@ -1312,10 +1308,11 @@
   if (!OI)
     return {false, nullptr};
 
-  FunctionCloner Cloner(F, OI.get(), ORE);
+  auto &ORE = (*GetORE)(*F);
+  FunctionCloner Cloner(F, OI.get());
   Cloner.NormalizeReturnBlock();
 
-  Function *OutlinedFunction = Cloner.doSingleRegionFunctionOutlining();
+  Function *OutlinedFunction = Cloner.doSingleRegionFunctionOutlining(ORE);
 
   if (!OutlinedFunction)
     return {false, nullptr};
Index: test/Transforms/CodeExtractor/PartialInlineORECrash.ll
===================================================================
--- /dev/null
+++ test/Transforms/CodeExtractor/PartialInlineORECrash.ll
@@ -0,0 +1,498 @@
+; RUN: opt < %s -partial-inliner -skip-partial-inlining-cost-analysis -disable-output
+target datalayout = "e-m:e-i64:64-n32:64"
+target triple = "powerpc64le-unknown-linux-gnu"
+
+%0 = type { i32 (...)**, %1, %1, %3, %3, %3, i8, float, %4*, %5*, %5*, i32, i32, i32, i32, float, float, float, i8*, i32, float, float, float, i8, [7 x i8] }
+%1 = type { %2, %3 }
+%2 = type { [3 x %3] }
+%3 = type { [4 x float] }
+%4 = type <{ i8*, i16, i16, [4 x i8], i8*, i32, %3, %3, [4 x i8] }>
+%5 = type { i32 (...)**, i32, i8* }
+%6 = type <{ %7, [4 x i8], %19*, %20*, %30, %35, %3, float, i8, i8, i8, i8, %37, i32, [4 x i8] }>
+%7 = type <{ %8, [7 x i8], void (%16*, float)*, void (%16*, float)*, i8*, %17 }>
+%8 = type <{ i32 (...)**, %9, %11*, %12, %13*, %14*, %15*, i8 }>
+%9 = type <{ %10, [3 x i8], i32, i32, [4 x i8], %0**, i8, [7 x i8] }>
+%10 = type { i8 }
+%11 = type { i32 (...)** }
+%12 = type { float, i32, i32, float, i8, %15*, i8, i8, i8, float, i8, float, %13* }
+%13 = type opaque
+%14 = type { i32 (...)** }
+%15 = type { i32 (...)** }
+%16 = type <{ %8, [7 x i8], void (%16*, float)*, void (%16*, float)*, i8*, %17, [4 x i8] }>
+%17 = type { %18 }
+%18 = type { float, float, float, float, float, i32, float, float, float, float, float, i32, float, float, float, i32, i32 }
+%19 = type { i32 (...)** }
+%20 = type <{ i32 (...)**, %21, %25, %9, i8, [7 x i8] }>
+%21 = type { %22 }
+%22 = type <{ %23, [3 x i8], i32, i32, [4 x i8], %24*, i8, [7 x i8] }>
+%23 = type { i8 }
+%24 = type { i32, i32 }
+%25 = type <{ %26, [3 x i8], i32, i32, [4 x i8], %27**, i8, [7 x i8] }>
+%26 = type { i8 }
+%27 = type { %28, [4 x i8], [4 x %29], i8*, i8*, i32, float, float, i32 }
+%28 = type { i32 }
+%29 = type <{ %3, %3, %3, %3, %3, float, float, float, i32, i32, i32, i32, [4 x i8], i8*, float, i8, [3 x i8], float, float, i32, %3, %3, [4 x i8] }>
+%30 = type <{ %31, [3 x i8], i32, i32, [4 x i8], %32**, i8, [7 x i8] }>
+%31 = type { i8 }
+%32 = type { i32 (...)**, %28, i32, i32, i8, %33*, %33*, float, float, %3, %3, %3 }
+%33 = type <{ %0, %2, %3, %3, float, %3, %3, %3, %3, %3, %3, %3, float, float, i8, [3 x i8], float, float, float, float, float, float, %34*, %30, i32, i32, i32, [4 x i8] }>
+%34 = type { i32 (...)** }
+%35 = type <{ %36, [3 x i8], i32, i32, [4 x i8], %33**, i8, [7 x i8] }>
+%36 = type { i8 }
+%37 = type <{ %38, [3 x i8], i32, i32, [4 x i8], %39**, i8, [7 x i8] }>
+%38 = type { i8 }
+%39 = type { i32 (...)** }
+%40 = type <{ i32 (...)**, %9, %11*, %12, %13*, %14*, %15*, i8, [7 x i8] }>
+
+@gDisableDeactivation = external local_unnamed_addr global i8, align 1
+@0 = private unnamed_addr constant [29 x i8] c"internalSingleStepSimulation\00", align 1
+@1 = private unnamed_addr constant [14 x i8] c"updateActions\00", align 1
+@2 = private unnamed_addr constant [22 x i8] c"updateActivationState\00", align 1
+@gDeactivationTime = external local_unnamed_addr global float, align 4
+
+declare void @_ZN15CProfileManager12Stop_ProfileEv() local_unnamed_addr
+
+declare void @_ZN15CProfileManager13Start_ProfileEPKc(i8*) local_unnamed_addr
+
+declare void @_ZN17btCollisionObject18setActivationStateEi(%0*, i32 signext) local_unnamed_addr
+
+declare hidden void @__clang_call_terminate(i8*) local_unnamed_addr
+
+declare i32 @__gxx_personality_v0(...)
+
+; Function Attrs: argmemonly nounwind
+declare void @llvm.memset.p0i8.i64(i8* nocapture writeonly, i8, i64, i1) #0
+
+define void @_ZN23btDiscreteDynamicsWorld28internalSingleStepSimulationEf(%6*, float) unnamed_addr align 2 personality i8* bitcast (i32 (...)* @__gxx_personality_v0 to i8*) !prof !30 {
+  tail call void @_ZN15CProfileManager13Start_ProfileEPKc(i8* getelementptr inbounds ([29 x i8], [29 x i8]* @0, i64 0, i64 0))
+  %3 = bitcast %6* %0 to %16*
+  %4 = getelementptr inbounds %6, %6* %0, i64 0, i32 0, i32 3
+  %5 = load void (%16*, float)*, void (%16*, float)** %4, align 8, !tbaa !31
+  %6 = icmp eq void (%16*, float)* %5, null
+  br i1 %6, label %12, label %7, !prof !37
+
+; <label>:7:                                      ; preds = %2
+  invoke void %5(%16* %3, float %1)
+          to label %12 unwind label %8
+
+; <label>:8:                                      ; preds = %12, %7
+  %9 = landingpad { i8*, i32 }
+          cleanup
+  %10 = extractvalue { i8*, i32 } %9, 0
+  %11 = extractvalue { i8*, i32 } %9, 1
+  br label %88
+
+; <label>:12:                                     ; preds = %7, %2
+  %13 = bitcast %6* %0 to void (%6*, float)***
+  %14 = load void (%6*, float)**, void (%6*, float)*** %13, align 8, !tbaa !38
+  %15 = getelementptr inbounds void (%6*, float)*, void (%6*, float)** %14, i64 30
+  %16 = load void (%6*, float)*, void (%6*, float)** %15, align 8
+  invoke void %16(%6* nonnull %0, float %1)
+          to label %17 unwind label %8
+
+; <label>:17:                                     ; preds = %12
+  %18 = bitcast %6* %0 to %40*
+  %19 = getelementptr inbounds %6, %6* %0, i64 0, i32 0, i32 0, i32 3, i32 0
+  store float %1, float* %19, align 8, !tbaa !40
+  %20 = getelementptr inbounds %6, %6* %0, i64 0, i32 0, i32 0, i32 3, i32 1
+  store i32 0, i32* %20, align 4, !tbaa !45
+  %21 = bitcast %6* %0 to %15* (%40*)***
+  %22 = load %15* (%40*)**, %15* (%40*)*** %21, align 8, !tbaa !38
+  %23 = getelementptr inbounds %15* (%40*)*, %15* (%40*)** %22, i64 4
+  %24 = load %15* (%40*)*, %15* (%40*)** %23, align 8
+  %25 = invoke %15* %24(%40* %18)
+          to label %26 unwind label %81
+
+; <label>:26:                                     ; preds = %17
+  %27 = getelementptr inbounds %6, %6* %0, i64 0, i32 0, i32 0, i32 3, i32 5
+  store %15* %25, %15** %27, align 8, !tbaa !46
+  %28 = bitcast %6* %0 to void (%40*)***
+  %29 = load void (%40*)**, void (%40*)*** %28, align 8, !tbaa !38
+  %30 = getelementptr inbounds void (%40*)*, void (%40*)** %29, i64 7
+  %31 = load void (%40*)*, void (%40*)** %30, align 8
+  invoke void %31(%40* %18)
+          to label %32 unwind label %81
+
+; <label>:32:                                     ; preds = %26
+  %33 = bitcast %6* %0 to void (%6*)***
+  %34 = load void (%6*)**, void (%6*)*** %33, align 8, !tbaa !38
+  %35 = getelementptr inbounds void (%6*)*, void (%6*)** %34, i64 32
+  %36 = load void (%6*)*, void (%6*)** %35, align 8
+  invoke void %36(%6* nonnull %0)
+          to label %37 unwind label %81
+
+; <label>:37:                                     ; preds = %32
+  %38 = getelementptr inbounds %6, %6* %0, i64 0, i32 0, i32 5
+  %39 = getelementptr inbounds %6, %6* %0, i64 0, i32 0, i32 5, i32 0, i32 3
+  store float %1, float* %39, align 4, !tbaa !47
+  %40 = bitcast %6* %0 to void (%6*, %17*)***
+  %41 = load void (%6*, %17*)**, void (%6*, %17*)*** %40, align 8, !tbaa !38
+  %42 = getelementptr inbounds void (%6*, %17*)*, void (%6*, %17*)** %41, i64 33
+  %43 = load void (%6*, %17*)*, void (%6*, %17*)** %42, align 8
+  invoke void %43(%6* nonnull %0, %17* nonnull dereferenceable(68) %38)
+          to label %44 unwind label %81
+
+; <label>:44:                                     ; preds = %37
+  %45 = load void (%6*, float)**, void (%6*, float)*** %13, align 8, !tbaa !38
+  %46 = getelementptr inbounds void (%6*, float)*, void (%6*, float)** %45, i64 31
+  %47 = load void (%6*, float)*, void (%6*, float)** %46, align 8
+  invoke void %47(%6* nonnull %0, float %1)
+          to label %48 unwind label %81
+
+; <label>:48:                                     ; preds = %44
+  invoke void @_ZN15CProfileManager13Start_ProfileEPKc(i8* getelementptr inbounds ([14 x i8], [14 x i8]* @1, i64 0, i64 0))
+          to label %49 unwind label %81
+
+; <label>:49:                                     ; preds = %48
+  %50 = getelementptr inbounds %6, %6* %0, i64 0, i32 12, i32 2
+  %51 = load i32, i32* %50, align 4, !tbaa !49
+  %52 = icmp sgt i32 %51, 0
+  br i1 %52, label %53, label %55, !prof !52
+
+; <label>:53:                                     ; preds = %49
+  %54 = getelementptr inbounds %6, %6* %0, i64 0, i32 12, i32 5
+  br label %58
+
+; <label>:55:                                     ; preds = %67, %49
+  invoke void @_ZN15CProfileManager12Stop_ProfileEv()
+          to label %75 unwind label %81
+
+; <label>:56:                                     ; preds = %58
+  %57 = landingpad { i8*, i32 }
+          cleanup
+  invoke void @_ZN15CProfileManager12Stop_ProfileEv()
+          to label %83 unwind label %72
+
+; <label>:58:                                     ; preds = %67, %53
+  %59 = phi i64 [ 0, %53 ], [ %68, %67 ]
+  %60 = load %39**, %39*** %54, align 8, !tbaa !53
+  %61 = getelementptr inbounds %39*, %39** %60, i64 %59
+  %62 = load %39*, %39** %61, align 8, !tbaa !54
+  %63 = bitcast %39* %62 to void (%39*, %40*, float)***
+  %64 = load void (%39*, %40*, float)**, void (%39*, %40*, float)*** %63, align 8, !tbaa !38
+  %65 = getelementptr inbounds void (%39*, %40*, float)*, void (%39*, %40*, float)** %64, i64 2
+  %66 = load void (%39*, %40*, float)*, void (%39*, %40*, float)** %65, align 8
+  invoke void %66(%39* %62, %40* nonnull %18, float %1)
+          to label %67 unwind label %56
+
+; <label>:67:                                     ; preds = %58
+  %68 = add nuw nsw i64 %59, 1
+  %69 = load i32, i32* %50, align 4, !tbaa !49
+  %70 = sext i32 %69 to i64
+  %71 = icmp slt i64 %68, %70
+  br i1 %71, label %58, label %55, !prof !52
+
+; <label>:72:                                     ; preds = %56
+  %73 = landingpad { i8*, i32 }
+          catch i8* null
+  %74 = extractvalue { i8*, i32 } %73, 0
+  tail call void @__clang_call_terminate(i8* %74)
+  unreachable
+
+; <label>:75:                                     ; preds = %55
+  invoke void @_ZN23btDiscreteDynamicsWorld21updateActivationStateEf(%6* nonnull %0, float %1)
+          to label %76 unwind label %81
+
+; <label>:76:                                     ; preds = %75
+  %77 = getelementptr inbounds %6, %6* %0, i64 0, i32 0, i32 2
+  %78 = load void (%16*, float)*, void (%16*, float)** %77, align 8, !tbaa !55
+  %79 = icmp eq void (%16*, float)* %78, null
+  br i1 %79, label %87, label %80, !prof !37
+
+; <label>:80:                                     ; preds = %76
+  invoke void %78(%16* nonnull %3, float %1)
+          to label %87 unwind label %81
+
+; <label>:81:                                     ; preds = %80, %75, %55, %48, %44, %37, %32, %26, %17
+  %82 = landingpad { i8*, i32 }
+          cleanup
+  br label %83
+
+; <label>:83:                                     ; preds = %81, %56
+  %84 = phi { i8*, i32 } [ %82, %81 ], [ %57, %56 ]
+  %85 = extractvalue { i8*, i32 } %84, 0
+  %86 = extractvalue { i8*, i32 } %84, 1
+  br label %88
+
+; <label>:87:                                     ; preds = %80, %76
+  tail call void @_ZN15CProfileManager12Stop_ProfileEv()
+  ret void
+
+; <label>:88:                                     ; preds = %83, %8
+  %89 = phi i32 [ %86, %83 ], [ %11, %8 ]
+  %90 = phi i8* [ %85, %83 ], [ %10, %8 ]
+  invoke void @_ZN15CProfileManager12Stop_ProfileEv()
+          to label %91 unwind label %94
+
+; <label>:91:                                     ; preds = %88
+  %92 = insertvalue { i8*, i32 } undef, i8* %90, 0
+  %93 = insertvalue { i8*, i32 } %92, i32 %89, 1
+  resume { i8*, i32 } %93
+
+; <label>:94:                                     ; preds = %88
+  %95 = landingpad { i8*, i32 }
+          catch i8* null
+  %96 = extractvalue { i8*, i32 } %95, 0
+  tail call void @__clang_call_terminate(i8* %96)
+  unreachable
+}
+
+define void @_ZN23btDiscreteDynamicsWorld21updateActivationStateEf(%6* nocapture readonly, float) local_unnamed_addr align 2 personality i8* bitcast (i32 (...)* @__gxx_personality_v0 to i8*) !prof !30 {
+  tail call void @_ZN15CProfileManager13Start_ProfileEPKc(i8* getelementptr inbounds ([22 x i8], [22 x i8]* @2, i64 0, i64 0))
+  %3 = getelementptr inbounds %6, %6* %0, i64 0, i32 5, i32 2
+  %4 = load i32, i32* %3, align 4, !tbaa !56
+  %5 = icmp sgt i32 %4, 0
+  br i1 %5, label %6, label %8, !prof !59
+
+; <label>:6:                                      ; preds = %2
+  %7 = getelementptr inbounds %6, %6* %0, i64 0, i32 5, i32 5
+  br label %9
+
+; <label>:8:                                      ; preds = %96, %2
+  tail call void @_ZN15CProfileManager12Stop_ProfileEv()
+  ret void
+
+; <label>:9:                                      ; preds = %96, %6
+  %10 = phi i64 [ 0, %6 ], [ %97, %96 ]
+  %11 = load %33**, %33*** %7, align 8, !tbaa !60
+  %12 = getelementptr inbounds %33*, %33** %11, i64 %10
+  %13 = load %33*, %33** %12, align 8, !tbaa !54
+  %14 = icmp eq %33* %13, null
+  br i1 %14, label %96, label %15, !prof !61
+
+; <label>:15:                                     ; preds = %9
+  %16 = getelementptr inbounds %33, %33* %13, i64 0, i32 0
+  %17 = getelementptr inbounds %33, %33* %13, i64 0, i32 0, i32 14
+  %18 = load i32, i32* %17, align 4, !tbaa !62
+  switch i32 %18, label %19 [
+    i32 2, label %59
+    i32 4, label %59
+  ], !prof !67
+
+; <label>:19:                                     ; preds = %15
+  %20 = getelementptr inbounds %33, %33* %13, i64 0, i32 2, i32 0, i64 0
+  %21 = load float, float* %20, align 4, !tbaa !68
+  %22 = fmul float %21, %21
+  %23 = getelementptr inbounds %33, %33* %13, i64 0, i32 2, i32 0, i64 1
+  %24 = load float, float* %23, align 4, !tbaa !68
+  %25 = fmul float %24, %24
+  %26 = fadd float %22, %25
+  %27 = getelementptr inbounds %33, %33* %13, i64 0, i32 2, i32 0, i64 2
+  %28 = load float, float* %27, align 4, !tbaa !68
+  %29 = fmul float %28, %28
+  %30 = fadd float %26, %29
+  %31 = getelementptr inbounds %33, %33* %13, i64 0, i32 20
+  %32 = load float, float* %31, align 8, !tbaa !69
+  %33 = fmul float %32, %32
+  %34 = fcmp olt float %30, %33
+  br i1 %34, label %35, label %55, !prof !73
+
+; <label>:35:                                     ; preds = %19
+  %36 = getelementptr inbounds %33, %33* %13, i64 0, i32 3, i32 0, i64 0
+  %37 = load float, float* %36, align 4, !tbaa !68
+  %38 = fmul float %37, %37
+  %39 = getelementptr inbounds %33, %33* %13, i64 0, i32 3, i32 0, i64 1
+  %40 = load float, float* %39, align 4, !tbaa !68
+  %41 = fmul float %40, %40
+  %42 = fadd float %38, %41
+  %43 = getelementptr inbounds %33, %33* %13, i64 0, i32 3, i32 0, i64 2
+  %44 = load float, float* %43, align 4, !tbaa !68
+  %45 = fmul float %44, %44
+  %46 = fadd float %42, %45
+  %47 = getelementptr inbounds %33, %33* %13, i64 0, i32 21
+  %48 = load float, float* %47, align 4, !tbaa !74
+  %49 = fmul float %48, %48
+  %50 = fcmp olt float %46, %49
+  br i1 %50, label %51, label %55, !prof !75
+
+; <label>:51:                                     ; preds = %35
+  %52 = getelementptr inbounds %33, %33* %13, i64 0, i32 0, i32 15
+  %53 = load float, float* %52, align 8, !tbaa !76
+  %54 = fadd float %53, %1
+  store float %54, float* %52, align 8, !tbaa !76
+  br label %62
+
+; <label>:55:                                     ; preds = %35, %19
+  %56 = getelementptr inbounds %33, %33* %13, i64 0, i32 0, i32 15
+  store float 0.000000e+00, float* %56, align 8, !tbaa !76
+  invoke void @_ZN17btCollisionObject18setActivationStateEi(%0* nonnull %16, i32 signext 0)
+          to label %57 unwind label %82
+
+; <label>:57:                                     ; preds = %55
+  %58 = load i32, i32* %17, align 4, !tbaa !62
+  br label %59
+
+; <label>:59:                                     ; preds = %57, %15, %15
+  %60 = phi i32 [ %18, %15 ], [ %18, %15 ], [ %58, %57 ]
+  %61 = icmp eq i32 %60, 4
+  br i1 %61, label %96, label %62, !prof !77
+
+; <label>:62:                                     ; preds = %59, %51
+  %63 = phi i32 [ %18, %51 ], [ %60, %59 ]
+  %64 = load i8, i8* @gDisableDeactivation, align 1, !tbaa !78, !range !79
+  %65 = icmp ne i8 %64, 0
+  %66 = load float, float* @gDeactivationTime, align 4
+  %67 = fcmp oeq float %66, 0.000000e+00
+  %68 = or i1 %65, %67
+  br i1 %68, label %95, label %69, !prof !80
+
+; <label>:69:                                     ; preds = %62
+  %70 = and i32 %63, -2
+  %71 = icmp eq i32 %70, 2
+  br i1 %71, label %76, label %72, !prof !81
+
+; <label>:72:                                     ; preds = %69
+  %73 = getelementptr inbounds %33, %33* %13, i64 0, i32 0, i32 15
+  %74 = load float, float* %73, align 8, !tbaa !76
+  %75 = fcmp ogt float %74, %66
+  br i1 %75, label %76, label %95, !prof !82
+
+; <label>:76:                                     ; preds = %72, %69
+  %77 = getelementptr inbounds %33, %33* %13, i64 0, i32 0, i32 11
+  %78 = load i32, i32* %77, align 8, !tbaa !83
+  %79 = and i32 %78, 3
+  %80 = icmp eq i32 %79, 0
+  br i1 %80, label %84, label %81
+
+; <label>:81:                                     ; preds = %76
+  invoke void @_ZN17btCollisionObject18setActivationStateEi(%0* nonnull %16, i32 signext 2)
+          to label %96 unwind label %82
+
+; <label>:82:                                     ; preds = %95, %86, %81, %55
+  %83 = landingpad { i8*, i32 }
+          cleanup
+  invoke void @_ZN15CProfileManager12Stop_ProfileEv()
+          to label %101 unwind label %102
+
+; <label>:84:                                     ; preds = %76
+  %85 = icmp eq i32 %63, 1
+  br i1 %85, label %86, label %89
+
+; <label>:86:                                     ; preds = %84
+  invoke void @_ZN17btCollisionObject18setActivationStateEi(%0* nonnull %16, i32 signext 3)
+          to label %87 unwind label %82
+
+; <label>:87:                                     ; preds = %86
+  %88 = load i32, i32* %17, align 4, !tbaa !62
+  br label %89
+
+; <label>:89:                                     ; preds = %87, %84
+  %90 = phi i32 [ %88, %87 ], [ %63, %84 ]
+  %91 = icmp eq i32 %90, 2
+  br i1 %91, label %92, label %96
+
+; <label>:92:                                     ; preds = %89
+  %93 = getelementptr inbounds %33, %33* %13, i64 0, i32 2
+  %94 = bitcast %3* %93 to i8*
+  call void @llvm.memset.p0i8.i64(i8* nonnull align 4 %94, i8 0, i64 32, i1 false)
+  br label %96
+
+; <label>:95:                                     ; preds = %72, %62
+  invoke void @_ZN17btCollisionObject18setActivationStateEi(%0* nonnull %16, i32 signext 1)
+          to label %96 unwind label %82
+
+; <label>:96:                                     ; preds = %95, %92, %89, %81, %59, %9
+  %97 = add nuw nsw i64 %10, 1
+  %98 = load i32, i32* %3, align 4, !tbaa !56
+  %99 = sext i32 %98 to i64
+  %100 = icmp slt i64 %97, %99
+  br i1 %100, label %9, label %8, !prof !59
+
+; <label>:101:                                    ; preds = %82
+  resume { i8*, i32 } %83
+
+; <label>:102:                                    ; preds = %82
+  %103 = landingpad { i8*, i32 }
+          catch i8* null
+  %104 = extractvalue { i8*, i32 } %103, 0
+  tail call void @__clang_call_terminate(i8* %104)
+  unreachable
+}
+
+attributes #0 = { argmemonly nounwind }
+
+!llvm.module.flags = !{!0, !27, !28}
+
+!0 = !{i32 1, !"ProfileSummary", !1}
+!1 = !{!2, !3, !4, !5, !6, !7, !8, !9}
+!2 = !{!"ProfileFormat", !"InstrProf"}
+!3 = !{!"TotalCount", i64 6540578580}
+!4 = !{!"MaxCount", i64 629805108}
+!5 = !{!"MaxInternalCount", i64 40670372}
+!6 = !{!"MaxFunctionCount", i64 629805108}
+!7 = !{!"NumCounts", i64 8554}
+!8 = !{!"NumFunctions", i64 3836}
+!9 = !{!"DetailedSummary", !10}
+!10 = !{!11, !12, !13, !14, !15, !16, !16, !17, !17, !18, !19, !20, !21, !22, !23, !24, !25, !26}
+!11 = !{i32 10000, i64 629805108, i32 1}
+!12 = !{i32 100000, i64 366853677, i32 2}
+!13 = !{i32 200000, i64 196816893, i32 4}
+!14 = !{i32 300000, i64 192575561, i32 7}
+!15 = !{i32 400000, i64 130688163, i32 11}
+!16 = !{i32 500000, i64 74857169, i32 19}
+!17 = !{i32 600000, i64 48184151, i32 30}
+!18 = !{i32 700000, i64 21298588, i32 49}
+!19 = !{i32 800000, i64 10721033, i32 90}
+!20 = !{i32 900000, i64 3301634, i32 202}
+!21 = !{i32 950000, i64 1454952, i32 362}
+!22 = !{i32 990000, i64 343872, i32 675}
+!23 = !{i32 999000, i64 46009, i32 1112}
+!24 = !{i32 999900, i64 6067, i32 1435}
+!25 = !{i32 999990, i64 700, i32 1721}
+!26 = !{i32 999999, i64 72, i32 1955}
+!27 = !{i32 1, !"wchar_size", i32 4}
+!28 = !{i32 7, !"PIC Level", i32 2}
+!30 = !{!"function_entry_count", i64 700}
+!31 = !{!32, !33, i64 144}
+!32 = !{!"_ZTS15btDynamicsWorld", !33, i64 136, !33, i64 144, !33, i64 152, !36, i64 160}
+!33 = !{!"any pointer", !34, i64 0}
+!34 = !{!"omnipotent char", !35, i64 0}
+!35 = !{!"Simple C++ TBAA"}
+!36 = !{!"_ZTS19btContactSolverInfo"}
+!37 = !{!"branch_weights", i32 701, i32 1}
+!38 = !{!39, !39, i64 0}
+!39 = !{!"vtable pointer", !35, i64 0}
+!40 = !{!41, !42, i64 0}
+!41 = !{!"_ZTS16btDispatcherInfo", !42, i64 0, !43, i64 4, !43, i64 8, !42, i64 12, !44, i64 16, !33, i64 24, !44, i64 32, !44, i64 33, !44, i64 34, !42, i64 36, !44, i64 40, !42, i64 44, !33, i64 48}
+!42 = !{!"float", !34, i64 0}
+!43 = !{!"int", !34, i64 0}
+!44 = !{!"bool", !34, i64 0}
+!45 = !{!41, !43, i64 4}
+!46 = !{!41, !33, i64 24}
+!47 = !{!48, !42, i64 12}
+!48 = !{!"_ZTS23btContactSolverInfoData", !42, i64 0, !42, i64 4, !42, i64 8, !42, i64 12, !42, i64 16, !43, i64 20, !42, i64 24, !42, i64 28, !42, i64 32, !42, i64 36, !42, i64 40, !43, i64 44, !42, i64 48, !42, i64 52, !42, i64 56, !43, i64 60, !43, i64 64}
+!49 = !{!50, !43, i64 4}
+!50 = !{!"_ZTS20btAlignedObjectArrayIP17btActionInterfaceE", !51, i64 0, !43, i64 4, !43, i64 8, !33, i64 16, !44, i64 24}
+!51 = !{!"_ZTS18btAlignedAllocatorIP17btActionInterfaceLj16EE"}
+!52 = !{!"branch_weights", i32 1, i32 701}
+!53 = !{!50, !33, i64 16}
+!54 = !{!33, !33, i64 0}
+!55 = !{!32, !33, i64 136}
+!56 = !{!57, !43, i64 4}
+!57 = !{!"_ZTS20btAlignedObjectArrayIP11btRigidBodyE", !58, i64 0, !43, i64 4, !43, i64 8, !33, i64 16, !44, i64 24}
+!58 = !{!"_ZTS18btAlignedAllocatorIP11btRigidBodyLj16EE"}
+!59 = !{!"branch_weights", i32 954001, i32 701}
+!60 = !{!57, !33, i64 16}
+!61 = !{!"branch_weights", i32 1, i32 954001}
+!62 = !{!63, !43, i64 228}
+!63 = !{!"_ZTS17btCollisionObject", !64, i64 8, !64, i64 72, !66, i64 136, !66, i64 152, !66, i64 168, !44, i64 184, !42, i64 188, !33, i64 192, !33, i64 200, !33, i64 208, !43, i64 216, !43, i64 220, !43, i64 224, !43, i64 228, !42, i64 232, !42, i64 236, !42, i64 240, !33, i64 248, !43, i64 256, !42, i64 260, !42, i64 264, !42, i64 268, !44, i64 272, !34, i64 273}
+!64 = !{!"_ZTS11btTransform", !65, i64 0, !66, i64 48}
+!65 = !{!"_ZTS11btMatrix3x3", !34, i64 0}
+!66 = !{!"_ZTS9btVector3", !34, i64 0}
+!67 = !{!"branch_weights", i32 -739819218, i32 3726, i32 3726}
+!68 = !{!42, !42, i64 0}
+!69 = !{!70, !42, i64 504}
+!70 = !{!"_ZTS11btRigidBody", !65, i64 280, !66, i64 328, !66, i64 344, !42, i64 360, !66, i64 364, !66, i64 380, !66, i64 396, !66, i64 412, !66, i64 428, !66, i64 444, !66, i64 460, !42, i64 476, !42, i64 480, !44, i64 484, !42, i64 488, !42, i64 492, !42, i64 496, !42, i64 500, !42, i64 504, !42, i64 508, !33, i64 512, !71, i64 520, !43, i64 552, !43, i64 556, !43, i64 560}
+!71 = !{!"_ZTS20btAlignedObjectArrayIP17btTypedConstraintE", !72, i64 0, !43, i64 4, !43, i64 8, !33, i64 16, !44, i64 24}
+!72 = !{!"_ZTS18btAlignedAllocatorIP17btTypedConstraintLj16EE"}
+!73 = !{!"branch_weights", i32 179252, i32 774750}
+!74 = !{!70, !42, i64 508}
+!75 = !{!"branch_weights", i32 178609, i32 644}
+!76 = !{!63, !42, i64 232}
+!77 = !{!"branch_weights", i32 2779, i32 2147480869}
+!78 = !{!44, !44, i64 0}
+!79 = !{i8 0, i8 2}
+!80 = !{!"branch_weights", i32 1908003, i32 1}
+!81 = !{!"branch_weights", i32 2251, i32 2147481397}
+!82 = !{!"branch_weights", i32 -2147483648, i32 0}
+!83 = !{!63, !43, i64 216}