1. identify more malloc/__malloc/free etc; 2. support user function tracking only