// File: /workspace/github_c_makefile_star2_O0/mabdi[P]bunney/bunny-main.c
// Function: valset_walk
static _u8 valset_walk(struct bunny_traceitem* t, _u8 size) {
  struct naive_list_int* l = 0;
  _u32 val;
  _s32 pos;

  if (reg_execs > cycle_branch_limit && (zero_range || reg_params > cycle_value_limit)) return 1;

  switch (size) {
    case 1: l = &byte_val_list; break;
    case 2: l = &word_val_list; break;
    case 4: l = &dword_val_list; break;
  }

  for (val=0;val < l->c; val++) 
    for (pos=0;pos < (_s32)t->fuzzable - size ;pos++) {
      struct bunny_traceitem* n;
      _s32 rval = 0;
      _u8 rne = 0;

      flow_command(FLOW_RESET,0,0,0);

      switch (size) {
        case 1: flow_command(FLOW_SETBYTE , pos, (rval = (_s8)l->v[val]) , 0); break;
        case 2: flow_command(FLOW_SETWORD , pos, (rval = (_s16)l->v[val]), 0); break;
        case 4: flow_command(FLOW_SETDWORD, pos, (rval = (_s32)l->v[val]), 0); break;
      }

      n = run_program();

      if (check_crash(n)) {
        outf("setting offset #%u to %d (%s).\n\n",pos, rval,
             (size == 1) ? "byte" : (size == 2) ? "word" : "dword" );
        if (keep_fault) continue;
        return 1;
      }

      if (reg_execs > cycle_branch_limit) epath_ign++;
        else if ((rne=register_new_exec(n,1))) {
        outf("      Triggered by setting offset #%u to %d (%s).\n",pos, rval,
             (size == 1) ? "byte" : (size == 2) ? "word" : "dword" );
        reg_execs++;
        if (reg_execs > cycle_branch_limit) 
          outf("      >>> Per-cycle call path limit of %u exceeded (use -N to adjust).\n",cycle_branch_limit);
      }

      if (reg_params > cycle_value_limit) ppath_ign++;
        else if (register_new_param(n,pos,size,1,rne)) {
          outf("      Triggered by setting offset #%u to %d (%s).\n",pos, rval,
               (size == 1) ? "byte" : (size == 2) ? "word" : "dword" );
          reg_params++;
          if (reg_params > cycle_value_limit) 
            outf("      >>> Per-cycle function parameter limit of %u exceeded (use -P to adjust).\n",cycle_value_limit);
        }
    
      /* Context not saved */
      if (!rne) discard_context(n,1);
    
    }

  return 0;
  
}

// Assembly:
pushq %rbp
movq %rsp, %rbp
subq $0xc0, %rsp
movb %sil, %al
movq %rdi, -0x10(%rbp)
movb %al, -0x11(%rbp)
movq $0x0, -0x20(%rbp)
movl 0x89f5(%rip), %eax      # 0x123c8
cmpl 0x884b(%rip), %eax      # 0x12224
jbe 0x99fe
movzbl 0x8923(%rip), %eax      # 0x12305
cmpl $0x0, %eax
jne 0x99f5
movl 0x89df(%rip), %eax      # 0x123cc
cmpl 0x8835(%rip), %eax      # 0x12228
jbe 0x99fe
movb $0x1, -0x1(%rbp)
jmp 0x9f6d
movzbl -0x11(%rbp), %eax
movl %eax, -0x3c(%rbp)
subl $0x1, %eax
je 0x9a20
jmp 0x9a0c
movl -0x3c(%rbp), %eax
subl $0x2, %eax
je 0x9a2d
jmp 0x9a16
movl -0x3c(%rbp), %eax
subl $0x4, %eax
je 0x9a3a
jmp 0x9a45
leaq 0x88e9(%rip), %rax      # 0x12310
movq %rax, -0x20(%rbp)
jmp 0x9a45
leaq 0x88ec(%rip), %rax      # 0x12320
movq %rax, -0x20(%rbp)
jmp 0x9a45
leaq 0x88ef(%rip), %rax      # 0x12330
movq %rax, -0x20(%rbp)
movl $0x0, -0x24(%rbp)
movl -0x24(%rbp), %eax
movq -0x20(%rbp), %rcx
cmpl 0x8(%rcx), %eax
jae 0x9f69
movl $0x0, -0x28(%rbp)
movl -0x28(%rbp), %eax
movq -0x10(%rbp), %rcx
movl 0x4(%rcx), %ecx
movzbl -0x11(%rbp), %edx
subl %edx, %ecx
cmpl %ecx, %eax
jge 0x9f59
movl $0x0, -0x34(%rbp)
movb $0x0, -0x35(%rbp)
movl $0x2, %edi
xorl %ecx, %ecx
movl %ecx, %esi
movl %ecx, %edx
callq 0x7590
movzbl -0x11(%rbp), %eax
movl %eax, -0x40(%rbp)
subl $0x1, %eax
je 0x9ab8
jmp 0x9aa4
movl -0x40(%rbp), %eax
subl $0x2, %eax
je 0x9adc
jmp 0x9aae
movl -0x40(%rbp), %eax
subl $0x4, %eax
je 0x9b00
jmp 0x9b1f
movl -0x28(%rbp), %esi
movq -0x20(%rbp), %rax
movq (%rax), %rax
movl -0x24(%rbp), %ecx
movl (%rax,%rcx,4), %eax
movsbl %al, %edx
movl %edx, -0x34(%rbp)
movl $0x65, %edi
xorl %ecx, %ecx
callq 0x7590
jmp 0x9b1f
movl -0x28(%rbp), %esi
movq -0x20(%rbp), %rax
movq (%rax), %rax
movl -0x24(%rbp), %ecx
movl (%rax,%rcx,4), %eax
movswl %ax, %edx
movl %edx, -0x34(%rbp)
movl $0x66, %edi
xorl %ecx, %ecx
callq 0x7590
jmp 0x9b1f
movl -0x28(%rbp), %esi
movq -0x20(%rbp), %rax
movq (%rax), %rax
movl -0x24(%rbp), %ecx
movl (%rax,%rcx,4), %edx
movl %edx, -0x34(%rbp)
movl $0x67, %edi
xorl %ecx, %ecx
callq 0x7590
callq 0x7b70
movq %rax, -0x30(%rbp)
movq -0x30(%rbp), %rdi
callq 0xcf40
cmpb $0x0, %al
je 0x9c1b
jmp 0x9b3b
movl -0x28(%rbp), %eax
movl %eax, -0x48(%rbp)
movl -0x34(%rbp), %eax
movl %eax, -0x44(%rbp)
movzbl -0x11(%rbp), %eax
cmpl $0x1, %eax
jne 0x9b5d
leaq 0x66df(%rip), %rax      # 0x10236
movq %rax, -0x50(%rbp)
jmp 0x9b7a
movzbl -0x11(%rbp), %edx
leaq 0x66d3(%rip), %rax      # 0x1023b
leaq 0x66cd(%rip), %rcx      # 0x1023c
cmpl $0x2, %edx
cmoveq %rcx, %rax
movq %rax, -0x50(%rbp)
movl -0x44(%rbp), %edx
movl -0x48(%rbp), %esi
movq -0x50(%rbp), %rcx
leaq 0x668a(%rip), %rdi      # 0x10215
movb $0x0, %al
callq 0x2030
cmpq $0x0, 0x873e(%rip)      # 0x122d8
je 0x9c02
movq 0x8735(%rip), %rax      # 0x122d8
movq %rax, -0x60(%rbp)
movl -0x28(%rbp), %eax
movl %eax, -0x58(%rbp)
movl -0x34(%rbp), %eax
movl %eax, -0x54(%rbp)
movzbl -0x11(%rbp), %eax
cmpl $0x1, %eax
jne 0x9bc9
leaq 0x6673(%rip), %rax      # 0x10236
movq %rax, -0x68(%rbp)
jmp 0x9be6
movzbl -0x11(%rbp), %edx
leaq 0x6667(%rip), %rax      # 0x1023b
leaq 0x6661(%rip), %rcx      # 0x1023c
cmpl $0x2, %edx
cmoveq %rcx, %rax
movq %rax, -0x68(%rbp)
movl -0x54(%rbp), %ecx
movl -0x58(%rbp), %edx
movq -0x60(%rbp), %rdi
movq -0x68(%rbp), %r8
leaq 0x661a(%rip), %rsi      # 0x10215
movb $0x0, %al
callq 0x22d0
jmp 0x9c04
cmpb $0x0, 0x86f7(%rip)      # 0x12302
je 0x9c12
jmp 0x9f4b
movb $0x1, -0x1(%rbp)
jmp 0x9f6d
movl 0x87a7(%rip), %eax      # 0x123c8
cmpl 0x85fd(%rip), %eax      # 0x12224
jbe 0x9c3d
movl 0x8731(%rip), %eax      # 0x12360
addl $0x1, %eax
movl %eax, 0x8728(%rip)      # 0x12360
jmp 0x9d90
movq -0x30(%rbp), %rdi
movl $0x1, %esi
callq 0x8770
movb %al, -0x35(%rbp)
cmpb $0x0, %al
je 0x9d8e
jmp 0x9c58
movl -0x28(%rbp), %eax
movl %eax, -0x70(%rbp)
movl -0x34(%rbp), %eax
movl %eax, -0x6c(%rbp)
movzbl -0x11(%rbp), %eax
cmpl $0x1, %eax
jne 0x9c7a
leaq 0x65c2(%rip), %rax      # 0x10236
movq %rax, -0x78(%rbp)
jmp 0x9c97
movzbl -0x11(%rbp), %edx
leaq 0x65b6(%rip), %rax      # 0x1023b
leaq 0x65b0(%rip), %rcx      # 0x1023c
cmpl $0x2, %edx
cmoveq %rcx, %rax
movq %rax, -0x78(%rbp)
movl -0x6c(%rbp), %edx
movl -0x70(%rbp), %esi
movq -0x78(%rbp), %rcx
leaq 0x6599(%rip), %rdi      # 0x10241
movb $0x0, %al
callq 0x2030
cmpq $0x0, 0x8621(%rip)      # 0x122d8
je 0x9d2e
movq 0x8618(%rip), %rax      # 0x122d8
movq %rax, -0x88(%rbp)
movl -0x28(%rbp), %eax
movl %eax, -0x80(%rbp)
movl -0x34(%rbp), %eax
movl %eax, -0x7c(%rbp)
movzbl -0x11(%rbp), %eax
cmpl $0x1, %eax
jne 0x9cec
leaq 0x6553(%rip), %rax      # 0x10236
movq %rax, -0x90(%rbp)
jmp 0x9d0c
movzbl -0x11(%rbp), %edx
leaq 0x6544(%rip), %rax      # 0x1023b
leaq 0x653e(%rip), %rcx      # 0x1023c
cmpl $0x2, %edx
cmoveq %rcx, %rax
movq %rax, -0x90(%rbp)
movl -0x7c(%rbp), %ecx
movl -0x80(%rbp), %edx
movq -0x88(%rbp), %rdi
movq -0x90(%rbp), %r8
leaq 0x651a(%rip), %rsi      # 0x10241
movb $0x0, %al
callq 0x22d0
jmp 0x9d30
movl 0x8692(%rip), %eax      # 0x123c8
addl $0x1, %eax
movl %eax, 0x8689(%rip)      # 0x123c8
movl 0x8683(%rip), %eax      # 0x123c8
cmpl 0x84d9(%rip), %eax      # 0x12224
jbe 0x9d8c
jmp 0x9d4f
movl 0x84cf(%rip), %esi      # 0x12224
leaq 0x6518(%rip), %rdi      # 0x10274
movb $0x0, %al
callq 0x2030
cmpq $0x0, 0x856d(%rip)      # 0x122d8
je 0x9d88
movq 0x8564(%rip), %rdi      # 0x122d8
movl 0x84aa(%rip), %edx      # 0x12224
leaq 0x64f3(%rip), %rsi      # 0x10274
movb $0x0, %al
callq 0x22d0
jmp 0x9d8a
jmp 0x9d8c
jmp 0x9d8e
jmp 0x9d90
movl 0x8636(%rip), %eax      # 0x123cc
cmpl 0x848c(%rip), %eax      # 0x12228
jbe 0x9db2
movl 0x85c4(%rip), %eax      # 0x12368
addl $0x1, %eax
movl %eax, 0x85bb(%rip)      # 0x12368
jmp 0x9f35
movq -0x30(%rbp), %rdi
movl -0x28(%rbp), %esi
movb -0x11(%rbp), %al
movl $0x1, %ecx
movzbl %al, %edx
movzbl -0x35(%rbp), %r8d
callq 0x8b80
cmpb $0x0, %al
je 0x9f33
jmp 0x9dd8
movl -0x28(%rbp), %eax
movl %eax, -0x98(%rbp)
movl -0x34(%rbp), %eax
movl %eax, -0x94(%rbp)
movzbl -0x11(%rbp), %eax
cmpl $0x1, %eax
jne 0x9e03
leaq 0x643c(%rip), %rax      # 0x10236
movq %rax, -0xa0(%rbp)
jmp 0x9e23
movzbl -0x11(%rbp), %edx
leaq 0x642d(%rip), %rax      # 0x1023b
leaq 0x6427(%rip), %rcx      # 0x1023c
cmpl $0x2, %edx
cmoveq %rcx, %rax
movq %rax, -0xa0(%rbp)
movl -0x94(%rbp), %edx
movl -0x98(%rbp), %esi
movq -0xa0(%rbp), %rcx
leaq 0x6404(%rip), %rdi      # 0x10241
movb $0x0, %al
callq 0x2030
cmpq $0x0, 0x848c(%rip)      # 0x122d8
je 0x9ed3
movq 0x847f(%rip), %rax      # 0x122d8
movq %rax, -0xb0(%rbp)
movl -0x28(%rbp), %eax
movl %eax, -0xa8(%rbp)
movl -0x34(%rbp), %eax
movl %eax, -0xa4(%rbp)
movzbl -0x11(%rbp), %eax
cmpl $0x1, %eax
jne 0x9e8b
leaq 0x63b4(%rip), %rax      # 0x10236
movq %rax, -0xb8(%rbp)
jmp 0x9eab
movzbl -0x11(%rbp), %edx
leaq 0x63a5(%rip), %rax      # 0x1023b
leaq 0x639f(%rip), %rcx      # 0x1023c
cmpl $0x2, %edx
cmoveq %rcx, %rax
movq %rax, -0xb8(%rbp)
movl -0xa4(%rbp), %ecx
movl -0xa8(%rbp), %edx
movq -0xb0(%rbp), %rdi
movq -0xb8(%rbp), %r8
leaq 0x6375(%rip), %rsi      # 0x10241
movb $0x0, %al
callq 0x22d0
jmp 0x9ed5
movl 0x84f1(%rip), %eax      # 0x123cc
addl $0x1, %eax
movl %eax, 0x84e8(%rip)      # 0x123cc
movl 0x84e2(%rip), %eax      # 0x123cc
cmpl 0x8338(%rip), %eax      # 0x12228
jbe 0x9f31
jmp 0x9ef4
movl 0x832e(%rip), %esi      # 0x12228
leaq 0x63bb(%rip), %rdi      # 0x102bc
movb $0x0, %al
callq 0x2030
cmpq $0x0, 0x83c8(%rip)      # 0x122d8
je 0x9f2d
movq 0x83bf(%rip), %rdi      # 0x122d8
movl 0x8309(%rip), %edx      # 0x12228
leaq 0x6396(%rip), %rsi      # 0x102bc
movb $0x0, %al
callq 0x22d0
jmp 0x9f2f
jmp 0x9f31
jmp 0x9f33
jmp 0x9f35
cmpb $0x0, -0x35(%rbp)
jne 0x9f49
movq -0x30(%rbp), %rdi
movl $0x1, %esi
callq 0x8570
jmp 0x9f4b
movl -0x28(%rbp), %eax
addl $0x1, %eax
movl %eax, -0x28(%rbp)
jmp 0x9a63
jmp 0x9f5b
movl -0x24(%rbp), %eax
addl $0x1, %eax
movl %eax, -0x24(%rbp)
jmp 0x9a4c
movb $0x0, -0x1(%rbp)
movb -0x1(%rbp), %al
addq $0xc0, %rsp
popq %rbp
retq
nopl (%rax)