more symbolic execution