finish WrTmp Binop symbolic execution