Permit path conditions that assert a function pointer as the result of an SSA instruction, and fix handling stores that may target a constant.