this is a version with: all kinds of cache for memory location instn, constraints operations. and also an agressive opt for SCC instn, and fine-grained cache for mem loc instn (pair<loc, field>). and do smashing for fields (but unsound).