Auto-insert callgate ret, mem dumps seem to miss them; print regs, ins/s at unlock exit.