#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ __VERIFIER_error();
void *__VERIFIER_nondet_int();
long __VERIFIER_nondet_long();
int ssl3_accept(int initial_state) {
  int s__info_callback = __VERIFIER_nondet_int();
  int s__in_handshake = __VERIFIER_nondet_int();
  int s__state;
  int s__new_session;
  int s__server;
  int s__version = __VERIFIER_nondet_int();
  int s__type;
  int s__init_num;
  int s__hit = __VERIFIER_nondet_int();
  int s__rwstate;
  int s__init_buf___0;
  int s__debug = __VERIFIER_nondet_int();
  int s__shutdown;
  int s__cert = __VERIFIER_nondet_int();
  int s__options = __VERIFIER_nondet_int();
  int s__verify_mode = __VERIFIER_nondet_int();
  int s__session__peer = __VERIFIER_nondet_int();
  int s__cert__pkeys__AT0__privatekey = __VERIFIER_nondet_int();
  int s__ctx__info_callback = __VERIFIER_nondet_int();
  int s__ctx__stats__sess_accept_renegotiate = __VERIFIER_nondet_int();
  int s__ctx__stats__sess_accept = __VERIFIER_nondet_int();
  int s__ctx__stats__sess_accept_good = __VERIFIER_nondet_int();
  int s__s3__tmp__cert_request;
  int s__s3__tmp__reuse_message;
  int s__s3__tmp__use_rsa_tmp;
  int s__s3__tmp__new_cipher = __VERIFIER_nondet_int();
  int s__s3__tmp__new_cipher__algorithms = __VERIFIER_nondet_int();
  int s__s3__tmp__next_state___0;
  int s__s3__tmp__new_cipher__algo_strength = __VERIFIER_nondet_int();
  int s__session__cipher;
  int buf;
  unsigned long l;
  unsigned long Time;
  unsigned long tmp;
  int cb;
  long num1 = __VERIFIER_nondet_long();
  int ret;
  int new_state;
  int state;
  int skip;
  int got_new_session;
  int tmp___1 = __VERIFIER_nondet_int();
  int tmp___2 = __VERIFIER_nondet_int();
  int tmp___3 = __VERIFIER_nondet_int();
  int tmp___4 = __VERIFIER_nondet_int();
  int tmp___5 = __VERIFIER_nondet_int();
  int tmp___6 = __VERIFIER_nondet_int();
  int tmp___7;
  long tmp___8 = __VERIFIER_nondet_long();
  int tmp___9 = __VERIFIER_nondet_int();
  int tmp___10 = __VERIFIER_nondet_int();
  int blastFlag;
  int __cil_tmp55;
  unsigned long __cil_tmp56;
  unsigned long __cil_tmp57;
  unsigned long __cil_tmp58;
  unsigned long __cil_tmp59;
  int __cil_tmp60;
  unsigned long __cil_tmp61;
  {
    s__s3__tmp__reuse_message = 0;
    s__state = initial_state;
    blastFlag = 0;
    tmp = __VERIFIER_nondet_int();
    Time = tmp;
    cb = 0;
    ret = -1;
    skip = 0;
    got_new_session = 0;
    if (s__info_callback != 0) {
      cb = s__info_callback;
    } else {
      if (s__ctx__info_callback != 0) {
        cb = s__ctx__info_callback;
      }
    }
    s__in_handshake++;
    if (tmp___1 + 12288) {
      if (tmp___2 + 16384) {
      }
    }
    if (s__cert == 0) {
      return (-1);
    }
    {
      while (1) {
      while_0_continue:;
        state = s__state;
        if (s__state == 12292) {
          goto switch_1_12292;
        } else {
          if (s__state == 16384) {
            goto switch_1_16384;
          } else {
            if (s__state == 8192) {
              goto switch_1_8192;
            } else {
              if (s__state == 24576) {
                goto switch_1_24576;
              } else {
                if (s__state == 8195) {
                  goto switch_1_8195;
                } else {
                  if (s__state == 8480) {
                    goto switch_1_8480;
                  } else {
                    if (s__state == 8481) {
                      goto switch_1_8481;
                    } else {
                      if (s__state == 8482) {
                        goto switch_1_8482;
                      } else {
                        if (s__state == 8464) {
                          goto switch_1_8464;
                        } else {
                          if (s__state == 8465) {
                            goto switch_1_8465;
                          } else {
                            if (s__state == 8466) {
                              goto switch_1_8466;
                            } else {
                              if (s__state == 8496) {
                                goto switch_1_8496;
                              } else {
                                if (s__state == 8497) {
                                  goto switch_1_8497;
                                } else {
                                  if (s__state == 8512) {
                                    goto switch_1_8512;
                                  } else {
                                    if (s__state == 8513) {
                                      goto switch_1_8513;
                                    } else {
                                      if (s__state == 8528) {
                                        goto switch_1_8528;
                                      } else {
                                        if (s__state == 8529) {
                                          goto switch_1_8529;
                                        } else {
                                          if (s__state == 8544) {
                                            goto switch_1_8544;
                                          } else {
                                            if (s__state == 8545) {
                                              goto switch_1_8545;
                                            } else {
                                              if (s__state == 8560) {
                                                goto switch_1_8560;
                                              } else {
                                                if (s__state == 8561) {
                                                  goto switch_1_8561;
                                                } else {
                                                  if (s__state == 8448) {
                                                    goto switch_1_8448;
                                                  } else {
                                                    if (s__state == 8576) {
                                                      goto switch_1_8576;
                                                    } else {
                                                      if (s__state == 8577) {
                                                        goto switch_1_8577;
                                                      } else {
                                                        if (s__state == 8592) {
                                                          goto switch_1_8592;
                                                        } else {
                                                          if (s__state ==
                                                              8593) {
                                                            goto switch_1_8593;
                                                          } else {
                                                            if (s__state ==
                                                                8608) {
                                                              goto switch_1_8608;
                                                            } else {
                                                              if (s__state ==
                                                                  8609) {
                                                                goto switch_1_8609;
                                                              } else {
                                                                if (s__state ==
                                                                    8640) {
                                                                  goto switch_1_8640;
                                                                } else {
                                                                  if (s__state ==
                                                                      8641) {
                                                                    goto switch_1_8641;
                                                                  } else {
                                                                    if (s__state ==
                                                                        8656) {
                                                                      goto switch_1_8656;
                                                                    } else {
                                                                      if (s__state ==
                                                                          8657) {
                                                                        goto switch_1_8657;
                                                                      } else {
                                                                        if (s__state ==
                                                                            8672) {
                                                                          goto switch_1_8672;
                                                                        } else {
                                                                          if (s__state ==
                                                                              8673) {
                                                                            goto switch_1_8673;
                                                                          } else {
                                                                            if (s__state ==
                                                                                3) {
                                                                              goto switch_1_3;
                                                                            } else {
                                                                              goto switch_1_default;
                                                                              if (0) {
                                                                              switch_1_12292
                                                                                  :
                                                                                s__new_session =
                                                                                    1;
                                                                              switch_1_16384
                                                                                  :;
                                                                              switch_1_8192
                                                                                  :;
                                                                              switch_1_24576
                                                                                  :;
                                                                              switch_1_8195
                                                                                  :
                                                                                s__server =
                                                                                    1;
                                                                                if (cb !=
                                                                                    0) {
                                                                                }
                                                                                {
                                                                                  __cil_tmp55 =
                                                                                      s__version *
                                                                                      8;
                                                                                  if (__cil_tmp55 !=
                                                                                      3) {
                                                                                    return (
                                                                                        -1);
                                                                                  }
                                                                                }
                                                                                s__type =
                                                                                    8192;
                                                                                if (s__init_buf___0 ==
                                                                                    0) {
                                                                                  buf =
                                                                                      __VERIFIER_nondet_int();
                                                                                  if (buf ==
                                                                                      0) {
                                                                                    ret =
                                                                                        -1;
                                                                                    goto end;
                                                                                  }
                                                                                  if (!tmp___3) {
                                                                                    ret =
                                                                                        -1;
                                                                                    goto end;
                                                                                  }
                                                                                  s__init_buf___0 =
                                                                                      buf;
                                                                                }
                                                                                if (!tmp___4) {
                                                                                  ret =
                                                                                      -1;
                                                                                  goto end;
                                                                                }
                                                                                s__init_num =
                                                                                    0;
                                                                                if (s__state !=
                                                                                    12292) {
                                                                                  if (!tmp___5) {
                                                                                    ret =
                                                                                        -1;
                                                                                    goto end;
                                                                                  }
                                                                                  s__state =
                                                                                      8464;
                                                                                  s__ctx__stats__sess_accept++;
                                                                                } else {
                                                                                  s__ctx__stats__sess_accept_renegotiate++;
                                                                                  s__state =
                                                                                      8480;
                                                                                }
                                                                                goto switch_1_break;
                                                                              switch_1_8480
                                                                                  :;
                                                                              switch_1_8481
                                                                                  :
                                                                                s__shutdown =
                                                                                    0;
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                s__s3__tmp__next_state___0 =
                                                                                    8482;
                                                                                s__state =
                                                                                    8448;
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8482
                                                                                  :
                                                                                s__state =
                                                                                    3;
                                                                                goto switch_1_break;
                                                                              switch_1_8464
                                                                                  :;
                                                                              switch_1_8465
                                                                                  :;
                                                                              switch_1_8466
                                                                                  :
                                                                                s__shutdown =
                                                                                    0;
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (blastFlag ==
                                                                                    0) {
                                                                                  blastFlag =
                                                                                      1;
                                                                                }
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                got_new_session =
                                                                                    1;
                                                                                s__state =
                                                                                    8496;
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8496
                                                                                  :;
                                                                              switch_1_8497
                                                                                  :
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (blastFlag ==
                                                                                    1) {
                                                                                  blastFlag =
                                                                                      2;
                                                                                }
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                if (s__hit) {
                                                                                  s__state =
                                                                                      8656;
                                                                                } else {
                                                                                  s__state =
                                                                                      8512;
                                                                                }
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8512
                                                                                  :;
                                                                              switch_1_8513
                                                                                  :;
                                                                                {
                                                                                  __cil_tmp56 =
                                                                                      (unsigned long)
                                                                                          s__s3__tmp__new_cipher__algorithms;
                                                                                  if (__cil_tmp56 +
                                                                                      256UL) {
                                                                                    skip =
                                                                                        1;
                                                                                  } else {
                                                                                    ret =
                                                                                        __VERIFIER_nondet_int();
                                                                                    if (ret <=
                                                                                        0) {
                                                                                      goto end;
                                                                                    }
                                                                                  }
                                                                                }
                                                                                s__state =
                                                                                    8528;
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8528
                                                                                  :;
                                                                              switch_1_8529
                                                                                  :
                                                                                l = (unsigned long)
                                                                                    s__s3__tmp__new_cipher__algorithms;
                                                                                {
                                                                                  __cil_tmp57 =
                                                                                      (unsigned long)
                                                                                          s__options;
                                                                                  if (__cil_tmp57 +
                                                                                      2097152UL) {
                                                                                    s__s3__tmp__use_rsa_tmp =
                                                                                        1;
                                                                                  } else {
                                                                                    s__s3__tmp__use_rsa_tmp =
                                                                                        0;
                                                                                  }
                                                                                }
                                                                                if (s__s3__tmp__use_rsa_tmp) {
                                                                                  goto _L___0;
                                                                                } else {
                                                                                  if (l +
                                                                                      30UL) {
                                                                                    goto _L___0;
                                                                                  } else {
                                                                                    if (l +
                                                                                        1UL) {
                                                                                      if (s__cert__pkeys__AT0__privatekey ==
                                                                                          0) {
                                                                                        goto _L___0;
                                                                                      } else {
                                                                                        {
                                                                                          __cil_tmp58 =
                                                                                              (unsigned long)
                                                                                                  s__s3__tmp__new_cipher__algo_strength;
                                                                                          if (__cil_tmp58 +
                                                                                              2UL) {
                                                                                            {
                                                                                              __cil_tmp59 =
                                                                                                  (unsigned long)
                                                                                                      s__s3__tmp__new_cipher__algo_strength;
                                                                                              if (__cil_tmp59 +
                                                                                                  4UL) {
                                                                                                tmp___7 =
                                                                                                    512;
                                                                                              } else {
                                                                                                tmp___7 =
                                                                                                    1024;
                                                                                              }
                                                                                            }
                                                                                            {
                                                                                              __cil_tmp60 =
                                                                                                  tmp___6 *
                                                                                                  8;
                                                                                              if (__cil_tmp60 >
                                                                                                  tmp___7) {
                                                                                              _L___0
                                                                                                  :
                                                                                                ret =
                                                                                                    __VERIFIER_nondet_int();
                                                                                                if (ret <=
                                                                                                    0) {
                                                                                                  goto end;
                                                                                                }
                                                                                              } else {
                                                                                                skip =
                                                                                                    1;
                                                                                              }
                                                                                            }
                                                                                          } else {
                                                                                            skip =
                                                                                                1;
                                                                                          }
                                                                                        }
                                                                                      }
                                                                                    } else {
                                                                                      skip =
                                                                                          1;
                                                                                    }
                                                                                  }
                                                                                }
                                                                                s__state =
                                                                                    8544;
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8544
                                                                                  :;
                                                                              switch_1_8545
                                                                                  :;
                                                                                if (s__verify_mode +
                                                                                    1) {
                                                                                  if (s__session__peer !=
                                                                                      0) {
                                                                                    if (s__verify_mode +
                                                                                        4) {
                                                                                      skip =
                                                                                          1;
                                                                                      s__s3__tmp__cert_request =
                                                                                          0;
                                                                                      s__state =
                                                                                          8560;
                                                                                    } else {
                                                                                      goto _L___2;
                                                                                    }
                                                                                  } else {
                                                                                  _L___2
                                                                                      : {
                                                                                    __cil_tmp61 =
                                                                                        (unsigned long)
                                                                                            s__s3__tmp__new_cipher__algorithms;
                                                                                    if (__cil_tmp61 +
                                                                                        256UL) {
                                                                                      if (s__verify_mode +
                                                                                          2) {
                                                                                        goto _L___1;
                                                                                      } else {
                                                                                        skip =
                                                                                            1;
                                                                                        s__s3__tmp__cert_request =
                                                                                            0;
                                                                                        s__state =
                                                                                            8560;
                                                                                      }
                                                                                    } else {
                                                                                    _L___1
                                                                                        :
                                                                                      s__s3__tmp__cert_request =
                                                                                          1;
                                                                                      ret =
                                                                                          __VERIFIER_nondet_int();
                                                                                      if (ret <=
                                                                                          0) {
                                                                                        goto end;
                                                                                      }
                                                                                      s__state =
                                                                                          8448;
                                                                                      s__s3__tmp__next_state___0 =
                                                                                          8576;
                                                                                      s__init_num =
                                                                                          0;
                                                                                    }
                                                                                  }
                                                                                  }
                                                                                } else {
                                                                                  skip =
                                                                                      1;
                                                                                  s__s3__tmp__cert_request =
                                                                                      0;
                                                                                  s__state =
                                                                                      8560;
                                                                                }
                                                                                goto switch_1_break;
                                                                              switch_1_8560
                                                                                  :;
                                                                              switch_1_8561
                                                                                  :
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                s__s3__tmp__next_state___0 =
                                                                                    8576;
                                                                                s__state =
                                                                                    8448;
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8448
                                                                                  :
                                                                                if (num1 >
                                                                                    0L) {
                                                                                  s__rwstate =
                                                                                      2;
                                                                                  num1 =
                                                                                      tmp___8;
                                                                                  if (num1 <=
                                                                                      0L) {
                                                                                    ret =
                                                                                        -1;
                                                                                    goto end;
                                                                                  }
                                                                                  s__rwstate =
                                                                                      1;
                                                                                }
                                                                                s__state =
                                                                                    s__s3__tmp__next_state___0;
                                                                                goto switch_1_break;
                                                                              switch_1_8576
                                                                                  :;
                                                                              switch_1_8577
                                                                                  :
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                if (ret ==
                                                                                    2) {
                                                                                  s__state =
                                                                                      8466;
                                                                                } else {
                                                                                  ret =
                                                                                      __VERIFIER_nondet_int();
                                                                                  if (ret <=
                                                                                      0) {
                                                                                    goto end;
                                                                                  }
                                                                                  s__init_num =
                                                                                      0;
                                                                                  s__state =
                                                                                      8592;
                                                                                }
                                                                                goto switch_1_break;
                                                                              switch_1_8592
                                                                                  :;
                                                                              switch_1_8593
                                                                                  :
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                s__state =
                                                                                    8608;
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8608
                                                                                  :;
                                                                              switch_1_8609
                                                                                  :
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                s__state =
                                                                                    8640;
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8640
                                                                                  :;
                                                                              switch_1_8641
                                                                                  :
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (blastFlag ==
                                                                                    4) {
                                                                                  blastFlag =
                                                                                      5;
                                                                                } else {
                                                                                  if (blastFlag ==
                                                                                      7) {
                                                                                    blastFlag =
                                                                                        8;
                                                                                  } else {
                                                                                    if (blastFlag ==
                                                                                        10) {
                                                                                      goto ERROR;
                                                                                    }
                                                                                  }
                                                                                }
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                if (s__hit) {
                                                                                  s__state =
                                                                                      3;
                                                                                } else {
                                                                                  s__state =
                                                                                      8656;
                                                                                }
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_8656
                                                                                  :;
                                                                              switch_1_8657
                                                                                  :
                                                                                s__session__cipher =
                                                                                    s__s3__tmp__new_cipher;
                                                                                if (!tmp___9) {
                                                                                  ret =
                                                                                      -1;
                                                                                  goto end;
                                                                                }
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (blastFlag ==
                                                                                    2) {
                                                                                  blastFlag =
                                                                                      3;
                                                                                } else {
                                                                                  if (blastFlag ==
                                                                                      5) {
                                                                                    blastFlag =
                                                                                        6;
                                                                                  } else {
                                                                                    if (blastFlag ==
                                                                                        8) {
                                                                                      blastFlag =
                                                                                          9;
                                                                                    }
                                                                                  }
                                                                                }
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                s__state =
                                                                                    8672;
                                                                                s__init_num =
                                                                                    0;
                                                                                if (!tmp___10) {
                                                                                  ret =
                                                                                      -1;
                                                                                  goto end;
                                                                                }
                                                                                goto switch_1_break;
                                                                              switch_1_8672
                                                                                  :;
                                                                              switch_1_8673
                                                                                  :
                                                                                ret =
                                                                                    __VERIFIER_nondet_int();
                                                                                if (blastFlag ==
                                                                                    3) {
                                                                                  blastFlag =
                                                                                      4;
                                                                                } else {
                                                                                  if (blastFlag ==
                                                                                      6) {
                                                                                    blastFlag =
                                                                                        7;
                                                                                  } else {
                                                                                    if (blastFlag ==
                                                                                        9) {
                                                                                      blastFlag =
                                                                                          10;
                                                                                    }
                                                                                  }
                                                                                }
                                                                                if (ret <=
                                                                                    0) {
                                                                                  goto end;
                                                                                }
                                                                                s__state =
                                                                                    8448;
                                                                                if (s__hit) {
                                                                                  s__s3__tmp__next_state___0 =
                                                                                      8640;
                                                                                } else {
                                                                                  s__s3__tmp__next_state___0 =
                                                                                      3;
                                                                                }
                                                                                s__init_num =
                                                                                    0;
                                                                                goto switch_1_break;
                                                                              switch_1_3
                                                                                  :
                                                                                s__init_buf___0 =
                                                                                    0;
                                                                                s__init_num =
                                                                                    0;
                                                                                if (got_new_session) {
                                                                                  s__new_session =
                                                                                      0;
                                                                                  s__ctx__stats__sess_accept_good++;
                                                                                  if (cb !=
                                                                                      0) {
                                                                                  }
                                                                                }
                                                                                ret =
                                                                                    1;
                                                                                goto end;
                                                                              switch_1_default
                                                                                  :
                                                                                ret =
                                                                                    -1;
                                                                                goto end;
                                                                              } else {
                                                                              switch_1_break
                                                                                  :;
                                                                              }
                                                                            }
                                                                          }
                                                                        }
                                                                      }
                                                                    }
                                                                  }
                                                                }
                                                              }
                                                            }
                                                          }
                                                        }
                                                      }
                                                    }
                                                  }
                                                }
                                              }
                                            }
                                          }
                                        }
                                      }
                                    }
                                  }
                                }
                              }
                            }
                          }
                        }
                      }
                    }
                  }
                }
              }
            }
          }
        }
        if (!s__s3__tmp__reuse_message) {
          if (!skip) {
            if (tmp___1 != -12288) {
              if (s__state != 8656) {
                if (tmp___2 != -16384) {
                  if (state == 8496) {
                    goto ERROR;
                  }
                }
              }
            }
            if (s__debug) {
              ret = __VERIFIER_nondet_int();
              if (ret <= 0) {
                goto end;
              }
            }
            if (cb != 0) {
              if (s__state != state) {
                new_state = s__state;
                s__state = state;
                s__state = new_state;
              }
            }
          }
        }
        skip = 0;
      }
    while_0_break:;
    }
  end:
    s__in_handshake--;
    if (cb != 0) {
    }
    return (ret);
  ERROR:
    __VERIFIER_error();
    return (-1);
  }
}


x86 assembly (clang, -O0):
<ssl3_accept>:
push   %rbp
mov    %rsp,%rbp
sub    $0x130,%rsp
mov    %edi,-0x8(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xc(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x10(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x20(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x2c(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x38(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x40(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x44(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x48(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x4c(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x50(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x54(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x58(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x5c(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x60(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x70(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x74(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x7c(%rbp)
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_long@plt>
mov    %rax,-0xb0(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xc8(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xcc(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xd0(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xd4(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xd8(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xdc(%rbp)
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_long@plt>
mov    %rax,-0xe8(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xec(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xf0(%rbp)
movl   $0x0,-0x68(%rbp)
mov    -0x8(%rbp),%eax
mov    %eax,-0x14(%rbp)
movl   $0x0,-0xf4(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,-0xa0(%rbp)
mov    -0xa0(%rbp),%rax
mov    %rax,-0x98(%rbp)
movl   $0x0,-0xa4(%rbp)
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
movl   $0x0,-0xc0(%rbp)
movl   $0x0,-0xc4(%rbp)
cmpl   $0x0,-0xc(%rbp)
je     12df <ssl3_accept+0x1af>
mov    -0xc(%rbp),%eax
mov    %eax,-0xa4(%rbp)
jmp    12f7 <ssl3_accept+0x1c7>
cmpl   $0x0,-0x54(%rbp)
je     12f2 <ssl3_accept+0x1c2>
mov    -0x54(%rbp),%eax
mov    %eax,-0xa4(%rbp)
jmp    12f7 <ssl3_accept+0x1c7>
mov    -0x10(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x10(%rbp)
mov    -0xc8(%rbp),%eax
add    $0x3000,%eax
cmp    $0x0,%eax
je     1332 <ssl3_accept+0x202>
mov    -0xcc(%rbp),%eax
add    $0x4000,%eax
cmp    $0x0,%eax
je     132d <ssl3_accept+0x1fd>
jmp    132d <ssl3_accept+0x1fd>
jmp    1332 <ssl3_accept+0x202>
cmpl   $0x0,-0x40(%rbp)
jne    1348 <ssl3_accept+0x218>
movl   $0xffffffff,-0x4(%rbp)
jmp    20d3 <ssl3_accept+0xfa3>
jmp    134d <ssl3_accept+0x21d>
jmp    1352 <ssl3_accept+0x222>
mov    -0x14(%rbp),%eax
mov    %eax,-0xbc(%rbp)
cmpl   $0x3004,-0x14(%rbp)
jne    136d <ssl3_accept+0x23d>
jmp    15d3 <ssl3_accept+0x4a3>
cmpl   $0x4000,-0x14(%rbp)
jne    137f <ssl3_accept+0x24f>
jmp    15da <ssl3_accept+0x4aa>
cmpl   $0x2000,-0x14(%rbp)
jne    1391 <ssl3_accept+0x261>
jmp    15df <ssl3_accept+0x4af>
cmpl   $0x6000,-0x14(%rbp)
jne    13a3 <ssl3_accept+0x273>
jmp    15e4 <ssl3_accept+0x4b4>
cmpl   $0x2003,-0x14(%rbp)
jne    13b5 <ssl3_accept+0x285>
jmp    15e9 <ssl3_accept+0x4b9>
cmpl   $0x2120,-0x14(%rbp)
jne    13c7 <ssl3_accept+0x297>
jmp    16fc <ssl3_accept+0x5cc>
cmpl   $0x2121,-0x14(%rbp)
jne    13d9 <ssl3_accept+0x2a9>
jmp    1701 <ssl3_accept+0x5d1>
cmpl   $0x2122,-0x14(%rbp)
jne    13eb <ssl3_accept+0x2bb>
jmp    1741 <ssl3_accept+0x611>
cmpl   $0x2110,-0x14(%rbp)
jne    13fd <ssl3_accept+0x2cd>
jmp    174d <ssl3_accept+0x61d>
cmpl   $0x2111,-0x14(%rbp)
jne    140f <ssl3_accept+0x2df>
jmp    1752 <ssl3_accept+0x622>
cmpl   $0x2112,-0x14(%rbp)
jne    1421 <ssl3_accept+0x2f1>
jmp    1757 <ssl3_accept+0x627>
cmpl   $0x2130,-0x14(%rbp)
jne    1433 <ssl3_accept+0x303>
jmp    17b1 <ssl3_accept+0x681>
cmpl   $0x2131,-0x14(%rbp)
jne    1445 <ssl3_accept+0x315>
jmp    17b6 <ssl3_accept+0x686>
cmpl   $0x2140,-0x14(%rbp)
jne    1457 <ssl3_accept+0x327>
jmp    1815 <ssl3_accept+0x6e5>
cmpl   $0x2141,-0x14(%rbp)
jne    1469 <ssl3_accept+0x339>
jmp    181a <ssl3_accept+0x6ea>
cmpl   $0x2150,-0x14(%rbp)
jne    147b <ssl3_accept+0x34b>
jmp    1882 <ssl3_accept+0x752>
cmpl   $0x2151,-0x14(%rbp)
jne    148d <ssl3_accept+0x35d>
jmp    1887 <ssl3_accept+0x757>
cmpl   $0x2160,-0x14(%rbp)
jne    149f <ssl3_accept+0x36f>
jmp    1a01 <ssl3_accept+0x8d1>
cmpl   $0x2161,-0x14(%rbp)
jne    14b1 <ssl3_accept+0x381>
jmp    1a06 <ssl3_accept+0x8d6>
cmpl   $0x2170,-0x14(%rbp)
jne    14c3 <ssl3_accept+0x393>
jmp    1b14 <ssl3_accept+0x9e4>
cmpl   $0x2171,-0x14(%rbp)
jne    14d5 <ssl3_accept+0x3a5>
jmp    1b19 <ssl3_accept+0x9e9>
cmpl   $0x2100,-0x14(%rbp)
jne    14e7 <ssl3_accept+0x3b7>
jmp    1b52 <ssl3_accept+0xa22>
cmpl   $0x2180,-0x14(%rbp)
jne    14f9 <ssl3_accept+0x3c9>
jmp    1ba4 <ssl3_accept+0xa74>
cmpl   $0x2181,-0x14(%rbp)
jne    150b <ssl3_accept+0x3db>
jmp    1ba9 <ssl3_accept+0xa79>
cmpl   $0x2190,-0x14(%rbp)
jne    151d <ssl3_accept+0x3ed>
jmp    1c13 <ssl3_accept+0xae3>
cmpl   $0x2191,-0x14(%rbp)
jne    152f <ssl3_accept+0x3ff>
jmp    1c18 <ssl3_accept+0xae8>
cmpl   $0x21a0,-0x14(%rbp)
jne    1541 <ssl3_accept+0x411>
jmp    1c4a <ssl3_accept+0xb1a>
cmpl   $0x21a1,-0x14(%rbp)
jne    1553 <ssl3_accept+0x423>
jmp    1c4f <ssl3_accept+0xb1f>
cmpl   $0x21c0,-0x14(%rbp)
jne    1565 <ssl3_accept+0x435>
jmp    1c81 <ssl3_accept+0xb51>
cmpl   $0x21c1,-0x14(%rbp)
jne    1577 <ssl3_accept+0x447>
jmp    1c86 <ssl3_accept+0xb56>
cmpl   $0x21d0,-0x14(%rbp)
jne    1589 <ssl3_accept+0x459>
jmp    1d22 <ssl3_accept+0xbf2>
cmpl   $0x21d1,-0x14(%rbp)
jne    159b <ssl3_accept+0x46b>
jmp    1d27 <ssl3_accept+0xbf7>
cmpl   $0x21e0,-0x14(%rbp)
jne    15ad <ssl3_accept+0x47d>
jmp    1df0 <ssl3_accept+0xcc0>
cmpl   $0x21e1,-0x14(%rbp)
jne    15bf <ssl3_accept+0x48f>
jmp    1df5 <ssl3_accept+0xcc5>
cmpl   $0x3,-0x14(%rbp)
jne    15ce <ssl3_accept+0x49e>
jmp    1e9d <ssl3_accept+0xd6d>
jmp    1eee <ssl3_accept+0xdbe>
movl   $0x1,-0x18(%rbp)
jmp    15df <ssl3_accept+0x4af>
jmp    15e4 <ssl3_accept+0x4b4>
jmp    15e9 <ssl3_accept+0x4b9>
movl   $0x1,-0x1c(%rbp)
cmpl   $0x0,-0xa4(%rbp)
je     1602 <ssl3_accept+0x4d2>
jmp    1602 <ssl3_accept+0x4d2>
mov    -0x20(%rbp),%eax
shl    $0x3,%eax
mov    %eax,-0xf8(%rbp)
cmpl   $0x3,-0xf8(%rbp)
je     1627 <ssl3_accept+0x4f7>
movl   $0xffffffff,-0x4(%rbp)
jmp    20d3 <ssl3_accept+0xfa3>
movl   $0x2000,-0x24(%rbp)
cmpl   $0x0,-0x34(%rbp)
jne    1686 <ssl3_accept+0x556>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x84(%rbp)
cmpl   $0x0,-0x84(%rbp)
jne    1661 <ssl3_accept+0x531>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
cmpl   $0x0,-0xd0(%rbp)
jne    167d <ssl3_accept+0x54d>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
mov    -0x84(%rbp),%eax
mov    %eax,-0x34(%rbp)
cmpl   $0x0,-0xd4(%rbp)
jne    16a2 <ssl3_accept+0x572>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
movl   $0x0,-0x28(%rbp)
cmpl   $0x3004,-0x14(%rbp)
je     16e7 <ssl3_accept+0x5b7>
cmpl   $0x0,-0xd8(%rbp)
jne    16d2 <ssl3_accept+0x5a2>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
movl   $0x2110,-0x14(%rbp)
mov    -0x5c(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x5c(%rbp)
jmp    16f7 <ssl3_accept+0x5c7>
mov    -0x58(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x58(%rbp)
movl   $0x2120,-0x14(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1701 <ssl3_accept+0x5d1>
movl   $0x0,-0x3c(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1727 <ssl3_accept+0x5f7>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x2122,-0x78(%rbp)
movl   $0x2100,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
movl   $0x3,-0x14(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1752 <ssl3_accept+0x622>
jmp    1757 <ssl3_accept+0x627>
movl   $0x0,-0x3c(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xf4(%rbp)
jne    1782 <ssl3_accept+0x652>
movl   $0x1,-0xf4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1794 <ssl3_accept+0x664>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x1,-0xc4(%rbp)
movl   $0x2130,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    17b6 <ssl3_accept+0x686>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x1,-0xf4(%rbp)
jne    17da <ssl3_accept+0x6aa>
movl   $0x2,-0xf4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     17ec <ssl3_accept+0x6bc>
jmp    209c <ssl3_accept+0xf6c>
cmpl   $0x0,-0x2c(%rbp)
je     1802 <ssl3_accept+0x6d2>
movl   $0x21d0,-0x14(%rbp)
jmp    1809 <ssl3_accept+0x6d9>
movl   $0x2140,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    181a <ssl3_accept+0x6ea>
movslq -0x74(%rbp),%rax
mov    %rax,-0x100(%rbp)
mov    -0x100(%rbp),%rax
add    $0x100,%rax
cmp    $0x0,%rax
je     184b <ssl3_accept+0x71b>
movl   $0x1,-0xc0(%rbp)
jmp    186f <ssl3_accept+0x73f>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     186a <ssl3_accept+0x73a>
jmp    209c <ssl3_accept+0xf6c>
jmp    186f <ssl3_accept+0x73f>
movl   $0x2150,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1887 <ssl3_accept+0x757>
movslq -0x74(%rbp),%rax
mov    %rax,-0x90(%rbp)
movslq -0x44(%rbp),%rax
mov    %rax,-0x108(%rbp)
mov    -0x108(%rbp),%rax
add    $0x200000,%rax
cmp    $0x0,%rax
je     18c0 <ssl3_accept+0x790>
movl   $0x1,-0x6c(%rbp)
jmp    18c7 <ssl3_accept+0x797>
movl   $0x0,-0x6c(%rbp)
cmpl   $0x0,-0x6c(%rbp)
je     18d6 <ssl3_accept+0x7a6>
jmp    1993 <ssl3_accept+0x863>
mov    -0x90(%rbp),%rax
add    $0x1e,%rax
cmp    $0x0,%rax
je     18f0 <ssl3_accept+0x7c0>
jmp    1993 <ssl3_accept+0x863>
mov    -0x90(%rbp),%rax
add    $0x1,%rax
cmp    $0x0,%rax
je     19da <ssl3_accept+0x8aa>
cmpl   $0x0,-0x50(%rbp)
jne    1914 <ssl3_accept+0x7e4>
jmp    1993 <ssl3_accept+0x863>
movslq -0x7c(%rbp),%rax
mov    %rax,-0x110(%rbp)
mov    -0x110(%rbp),%rax
add    $0x2,%rax
cmp    $0x0,%rax
je     19c6 <ssl3_accept+0x896>
movslq -0x7c(%rbp),%rax
mov    %rax,-0x118(%rbp)
mov    -0x118(%rbp),%rax
add    $0x4,%rax
cmp    $0x0,%rax
je     1963 <ssl3_accept+0x833>
movl   $0x200,-0xe0(%rbp)
jmp    196d <ssl3_accept+0x83d>
movl   $0x400,-0xe0(%rbp)
mov    -0xdc(%rbp),%eax
shl    $0x3,%eax
mov    %eax,-0x11c(%rbp)
mov    -0x11c(%rbp),%eax
cmp    -0xe0(%rbp),%eax
jle    19b7 <ssl3_accept+0x887>
jmp    1993 <ssl3_accept+0x863>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     19b2 <ssl3_accept+0x882>
jmp    209c <ssl3_accept+0xf6c>
jmp    19c1 <ssl3_accept+0x891>
movl   $0x1,-0xc0(%rbp)
jmp    19d0 <ssl3_accept+0x8a0>
movl   $0x1,-0xc0(%rbp)
jmp    19d5 <ssl3_accept+0x8a5>
jmp    19e4 <ssl3_accept+0x8b4>
movl   $0x1,-0xc0(%rbp)
jmp    19e9 <ssl3_accept+0x8b9>
jmp    19ee <ssl3_accept+0x8be>
movl   $0x2160,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1a06 <ssl3_accept+0x8d6>
mov    -0x48(%rbp),%eax
add    $0x1,%eax
cmp    $0x0,%eax
je     1af7 <ssl3_accept+0x9c7>
cmpl   $0x0,-0x4c(%rbp)
je     1a55 <ssl3_accept+0x925>
mov    -0x48(%rbp),%eax
add    $0x4,%eax
cmp    $0x0,%eax
je     1a4b <ssl3_accept+0x91b>
movl   $0x1,-0xc0(%rbp)
movl   $0x0,-0x64(%rbp)
movl   $0x2170,-0x14(%rbp)
jmp    1a50 <ssl3_accept+0x920>
jmp    1a5a <ssl3_accept+0x92a>
jmp    1af2 <ssl3_accept+0x9c2>
jmp    1a5a <ssl3_accept+0x92a>
movslq -0x74(%rbp),%rax
mov    %rax,-0x128(%rbp)
mov    -0x128(%rbp),%rax
add    $0x100,%rax
cmp    $0x0,%rax
je     1aad <ssl3_accept+0x97d>
mov    -0x48(%rbp),%eax
add    $0x2,%eax
cmp    $0x0,%eax
je     1a90 <ssl3_accept+0x960>
jmp    1ab2 <ssl3_accept+0x982>
movl   $0x1,-0xc0(%rbp)
movl   $0x0,-0x64(%rbp)
movl   $0x2170,-0x14(%rbp)
jmp    1aed <ssl3_accept+0x9bd>
jmp    1ab2 <ssl3_accept+0x982>
movl   $0x1,-0x64(%rbp)
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1ad8 <ssl3_accept+0x9a8>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x2100,-0x14(%rbp)
movl   $0x2180,-0x78(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1af2 <ssl3_accept+0x9c2>
jmp    1b0f <ssl3_accept+0x9df>
movl   $0x1,-0xc0(%rbp)
movl   $0x0,-0x64(%rbp)
movl   $0x2170,-0x14(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1b19 <ssl3_accept+0x9e9>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1b38 <ssl3_accept+0xa08>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x2180,-0x78(%rbp)
movl   $0x2100,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
cmpq   $0x0,-0xb0(%rbp)
jle    1b99 <ssl3_accept+0xa69>
movl   $0x2,-0x30(%rbp)
mov    -0xe8(%rbp),%rax
mov    %rax,-0xb0(%rbp)
cmpq   $0x0,-0xb0(%rbp)
jg     1b92 <ssl3_accept+0xa62>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
movl   $0x1,-0x30(%rbp)
mov    -0x78(%rbp),%eax
mov    %eax,-0x14(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1ba9 <ssl3_accept+0xa79>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1bc8 <ssl3_accept+0xa98>
jmp    209c <ssl3_accept+0xf6c>
cmpl   $0x2,-0xb4(%rbp)
jne    1be1 <ssl3_accept+0xab1>
movl   $0x2112,-0x14(%rbp)
jmp    1c0e <ssl3_accept+0xade>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1c00 <ssl3_accept+0xad0>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x0,-0x28(%rbp)
movl   $0x2190,-0x14(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1c18 <ssl3_accept+0xae8>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1c37 <ssl3_accept+0xb07>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x21a0,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1c4f <ssl3_accept+0xb1f>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     1c6e <ssl3_accept+0xb3e>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x21c0,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1c86 <ssl3_accept+0xb56>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x4,-0xf4(%rbp)
jne    1caf <ssl3_accept+0xb7f>
movl   $0x5,-0xf4(%rbp)
jmp    1ce7 <ssl3_accept+0xbb7>
cmpl   $0x7,-0xf4(%rbp)
jne    1ccb <ssl3_accept+0xb9b>
movl   $0x8,-0xf4(%rbp)
jmp    1ce2 <ssl3_accept+0xbb2>
cmpl   $0xa,-0xf4(%rbp)
jne    1cdd <ssl3_accept+0xbad>
jmp    20c5 <ssl3_accept+0xf95>
jmp    1ce2 <ssl3_accept+0xbb2>
jmp    1ce7 <ssl3_accept+0xbb7>
cmpl   $0x0,-0xb4(%rbp)
jg     1cf9 <ssl3_accept+0xbc9>
jmp    209c <ssl3_accept+0xf6c>
cmpl   $0x0,-0x2c(%rbp)
je     1d0f <ssl3_accept+0xbdf>
movl   $0x3,-0x14(%rbp)
jmp    1d16 <ssl3_accept+0xbe6>
movl   $0x21d0,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
jmp    1d27 <ssl3_accept+0xbf7>
mov    -0x70(%rbp),%eax
mov    %eax,-0x80(%rbp)
cmpl   $0x0,-0xec(%rbp)
jne    1d49 <ssl3_accept+0xc19>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x2,-0xf4(%rbp)
jne    1d72 <ssl3_accept+0xc42>
movl   $0x3,-0xf4(%rbp)
jmp    1daf <ssl3_accept+0xc7f>
cmpl   $0x5,-0xf4(%rbp)
jne    1d8e <ssl3_accept+0xc5e>
movl   $0x6,-0xf4(%rbp)
jmp    1daa <ssl3_accept+0xc7a>
cmpl   $0x8,-0xf4(%rbp)
jne    1da5 <ssl3_accept+0xc75>
movl   $0x9,-0xf4(%rbp)
jmp    1daa <ssl3_accept+0xc7a>
jmp    1daf <ssl3_accept+0xc7f>
cmpl   $0x0,-0xb4(%rbp)
jg     1dc1 <ssl3_accept+0xc91>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x21e0,-0x14(%rbp)
movl   $0x0,-0x28(%rbp)
cmpl   $0x0,-0xf0(%rbp)
jne    1deb <ssl3_accept+0xcbb>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
jmp    1efd <ssl3_accept+0xdcd>
jmp    1df5 <ssl3_accept+0xcc5>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x3,-0xf4(%rbp)
jne    1e1e <ssl3_accept+0xcee>
movl   $0x4,-0xf4(%rbp)
jmp    1e5b <ssl3_accept+0xd2b>
cmpl   $0x6,-0xf4(%rbp)
jne    1e3a <ssl3_accept+0xd0a>
movl   $0x7,-0xf4(%rbp)
jmp    1e56 <ssl3_accept+0xd26>
cmpl   $0x9,-0xf4(%rbp)
jne    1e51 <ssl3_accept+0xd21>
movl   $0xa,-0xf4(%rbp)
jmp    1e56 <ssl3_accept+0xd26>
jmp    1e5b <ssl3_accept+0xd2b>
cmpl   $0x0,-0xb4(%rbp)
jg     1e6d <ssl3_accept+0xd3d>
jmp    209c <ssl3_accept+0xf6c>
movl   $0x2100,-0x14(%rbp)
cmpl   $0x0,-0x2c(%rbp)
je     1e8a <ssl3_accept+0xd5a>
movl   $0x21c0,-0x78(%rbp)
jmp    1e91 <ssl3_accept+0xd61>
movl   $0x3,-0x78(%rbp)
movl   $0x0,-0x28(%rbp)
jmp    1efd <ssl3_accept+0xdcd>
movl   $0x0,-0x34(%rbp)
movl   $0x0,-0x28(%rbp)
cmpl   $0x0,-0xc4(%rbp)
je     1edf <ssl3_accept+0xdaf>
movl   $0x0,-0x18(%rbp)
mov    -0x60(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x60(%rbp)
cmpl   $0x0,-0xa4(%rbp)
je     1eda <ssl3_accept+0xdaa>
jmp    1eda <ssl3_accept+0xdaa>
jmp    1edf <ssl3_accept+0xdaf>
movl   $0x1,-0xb4(%rbp)
jmp    209c <ssl3_accept+0xf6c>
movl   $0xffffffff,-0xb4(%rbp)
ff ff ff
jmp    209c <ssl3_accept+0xf6c>
jmp    1f02 <ssl3_accept+0xdd2>
jmp    1f07 <ssl3_accept+0xdd7>
jmp    1f0c <ssl3_accept+0xddc>
jmp    1f11 <ssl3_accept+0xde1>
jmp    1f16 <ssl3_accept+0xde6>
jmp    1f1b <ssl3_accept+0xdeb>
jmp    1f20 <ssl3_accept+0xdf0>
jmp    1f25 <ssl3_accept+0xdf5>
jmp    1f2a <ssl3_accept+0xdfa>
jmp    1f2f <ssl3_accept+0xdff>
jmp    1f34 <ssl3_accept+0xe04>
jmp    1f39 <ssl3_accept+0xe09>
jmp    1f3e <ssl3_accept+0xe0e>
jmp    1f43 <ssl3_accept+0xe13>
jmp    1f48 <ssl3_accept+0xe18>
jmp    1f4d <ssl3_accept+0xe1d>
jmp    1f52 <ssl3_accept+0xe22>
jmp    1f57 <ssl3_accept+0xe27>
jmp    1f5c <ssl3_accept+0xe2c>
jmp    1f61 <ssl3_accept+0xe31>
jmp    1f66 <ssl3_accept+0xe36>
jmp    1f6b <ssl3_accept+0xe3b>
jmp    1f70 <ssl3_accept+0xe40>
jmp    1f75 <ssl3_accept+0xe45>
jmp    1f7a <ssl3_accept+0xe4a>
jmp    1f7f <ssl3_accept+0xe4f>
jmp    1f84 <ssl3_accept+0xe54>
jmp    1f89 <ssl3_accept+0xe59>
jmp    1f8e <ssl3_accept+0xe5e>
jmp    1f93 <ssl3_accept+0xe63>
jmp    1f98 <ssl3_accept+0xe68>
jmp    1f9d <ssl3_accept+0xe6d>
jmp    1fa2 <ssl3_accept+0xe72>
jmp    1fa7 <ssl3_accept+0xe77>
jmp    1fac <ssl3_accept+0xe7c>
jmp    1fb1 <ssl3_accept+0xe81>
cmpl   $0x0,-0x68(%rbp)
jne    208d <ssl3_accept+0xf5d>
cmpl   $0x0,-0xc0(%rbp)
jne    2088 <ssl3_accept+0xf58>
cmpl   $0xffffd000,-0xc8(%rbp)
d0 ff ff
je     2019 <ssl3_accept+0xee9>
cmpl   $0x21d0,-0x14(%rbp)
je     2014 <ssl3_accept+0xee4>
cmpl   $0xffffc000,-0xcc(%rbp)
c0 ff ff
je     200f <ssl3_accept+0xedf>
cmpl   $0x2130,-0xbc(%rbp)
jne    200a <ssl3_accept+0xeda>
jmp    20c5 <ssl3_accept+0xf95>
jmp    200f <ssl3_accept+0xedf>
jmp    2014 <ssl3_accept+0xee4>
jmp    2019 <ssl3_accept+0xee9>
cmpl   $0x0,-0x38(%rbp)
je     2047 <ssl3_accept+0xf17>
mov    $0x0,%al
call   1040 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xb4(%rbp)
cmpl   $0x0,-0xb4(%rbp)
jg     2042 <ssl3_accept+0xf12>
jmp    209c <ssl3_accept+0xf6c>
jmp    2047 <ssl3_accept+0xf17>
cmpl   $0x0,-0xa4(%rbp)
je     2083 <ssl3_accept+0xf53>
mov    -0x14(%rbp),%eax
cmp    -0xbc(%rbp),%eax
je     207e <ssl3_accept+0xf4e>
mov    -0x14(%rbp),%eax
mov    %eax,-0xb8(%rbp)
mov    -0xbc(%rbp),%eax
mov    %eax,-0x14(%rbp)
mov    -0xb8(%rbp),%eax
mov    %eax,-0x14(%rbp)
jmp    2083 <ssl3_accept+0xf53>
jmp    2088 <ssl3_accept+0xf58>
jmp    208d <ssl3_accept+0xf5d>
movl   $0x0,-0xc0(%rbp)
jmp    134d <ssl3_accept+0x21d>
mov    -0x10(%rbp),%eax
add    $0xffffffff,%eax
mov    %eax,-0x10(%rbp)
cmpl   $0x0,-0xa4(%rbp)
je     20b7 <ssl3_accept+0xf87>
jmp    20b7 <ssl3_accept+0xf87>
mov    -0xb4(%rbp),%eax
mov    %eax,-0x4(%rbp)
jmp    20d3 <ssl3_accept+0xfa3>
mov    $0x0,%al
call   1050 <__VERIFIER_error@plt>
movl   $0xffffffff,-0x4(%rbp)
mov    -0x4(%rbp),%eax
add    $0x130,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<ssl3_accept>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0x78,%rsp
mov    %edi,%r12d
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x8(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x70(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,%rbx
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x18(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,%r14
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x20(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x28(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,%r13
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,%rbp
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_long@plt>
mov    %rax,0x40(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x68(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x60(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,%r15
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_long@plt>
mov    %rax,0x58(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x50(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rax,0x48(%rsp)
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    $0xffffffff,%eax
test   %ebx,%ebx
je     179f <ssl3_accept+0x66f>
mov    $0xffffff00,%edx
cmpl   $0x0,0x20(%rsp)
sete   %al
cmp    $0xfffffffc,%r14d
sete   %cl
or     %al,%cl
mov    %cl,0x17(%rsp)
mov    %r13d,%esi
cmp    %rdx,%rsi
setne  %al
cmp    $0xfffffffe,%r14d
sete   %cl
and    %al,%cl
mov    %cl,0x16(%rsp)
mov    0x18(%rsp),%eax
lea    -0x1fff00(%rdx),%rcx
xor    %rax,%rcx
lea    0xe2(%rdx),%rax
mov    %rsi,0x20(%rsp)
xor    %rsi,%rax
or     %rcx,%rax
setne  %al
cmpl   $0x0,0x28(%rsp)
sete   %cl
or     %al,%cl
mov    %cl,0x28(%rsp)
shl    $0x20,%rbp
shl    $0x3,%r15d
cmpl   $0x0,0x8(%rsp)
mov    $0x2140,%ecx
mov    $0x21d0,%eax
cmovne %eax,%ecx
mov    %ecx,0x3c(%rsp)
mov    $0x3,%ecx
mov    $0x21c0,%edx
cmove  %ecx,%edx
mov    %edx,0x38(%rsp)
cmove  %eax,%ecx
mov    %ecx,0x34(%rsp)
xor    %r13d,%r13d
mov    %r14,%rdx
mov    %r14,0x8(%rsp)
mov    %rbp,%rsi
mov    %r15,%rbx
jmp    132a <ssl3_accept+0x1fa>
mov    0x18(%rsp),%r12d
cmpl   $0x0,0x70(%rsp)
je     132a <ssl3_accept+0x1fa>
xchg   %ax,%ax
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rbx,%r15
mov    %rbp,%rsi
mov    0x8(%rsp),%rdx
test   %eax,%eax
jle    1791 <ssl3_accept+0x661>
mov    %r12d,%r14d
cmp    $0x3003,%r12d
jle    1360 <ssl3_accept+0x230>
cmp    $0x3004,%r14d
je     179a <ssl3_accept+0x66a>
cmp    $0x4000,%r14d
je     179a <ssl3_accept+0x66a>
cmp    $0x6000,%r14d
jne    137a <ssl3_accept+0x24a>
jmp    179a <ssl3_accept+0x66a>
xchg   %ax,%ax
cmp    $0x2000,%r14d
je     179a <ssl3_accept+0x66a>
cmp    $0x2003,%r14d
je     179a <ssl3_accept+0x66a>
mov    %r14d,%eax
and    $0xfffffffe,%eax
cmp    $0x2120,%eax
je     13d0 <ssl3_accept+0x2a0>
lea    -0x2110(%r14),%ecx
cmp    $0x3,%ecx
jae    1410 <ssl3_accept+0x2e0>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rbx,%r15
mov    %rbp,%rsi
mov    0x8(%rsp),%rdx
test   %r13d,%r13d
mov    $0x1,%ecx
cmove  %ecx,%r13d
mov    $0x2130,%r12d
test   %eax,%eax
jg     15b0 <ssl3_accept+0x480>
jmp    1791 <ssl3_accept+0x661>
cs nopw 0x0(%rax,%rax,1)
xchg   %ax,%ax
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
test   %eax,%eax
jle    1791 <ssl3_accept+0x661>
movl   $0x2122,0x18(%rsp)
mov    $0x2100,%r12d
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
cmpl   $0x0,0x70(%rsp)
jne    1310 <ssl3_accept+0x1e0>
jmp    132a <ssl3_accept+0x1fa>
nopl   0x0(%rax,%rax,1)
mov    $0x3,%r12d
cmp    $0x2122,%r14d
je     15b0 <ssl3_accept+0x480>
lea    -0x2130(%rax),%ecx
rol    $0x1c,%ecx
cmp    $0x4,%ecx
ja     1467 <ssl3_accept+0x337>
lea    0xbc8(%rip),%rdi
movslq (%rdi,%rcx,4),%rax
add    %rdi,%rax
jmp    *%rax
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
test   %eax,%eax
jle    1791 <ssl3_accept+0x661>
cmp    $0x1,%r13d
mov    $0x2,%eax
cmove  %eax,%r13d
mov    0x3c(%rsp),%r12d
jmp    1572 <ssl3_accept+0x442>
cmp    $0x2100,%r14d
jne    15c0 <ssl3_accept+0x490>
cmpq   $0x0,0x40(%rsp)
jle    1302 <ssl3_accept+0x1d2>
mov    0x18(%rsp),%r12d
mov    0x58(%rsp),%rax
mov    %rax,0x40(%rsp)
test   %rax,%rax
jg     15b0 <ssl3_accept+0x480>
jmp    179a <ssl3_accept+0x66a>
mov    $0x2150,%r12d
mov    $0xffffff00,%eax
cmp    %rax,0x20(%rsp)
jne    132a <ssl3_accept+0x1fa>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rbx,%r15
mov    %rbp,%rsi
mov    0x8(%rsp),%rdx
mov    $0x2150,%r12d
jmp    1527 <ssl3_accept+0x3f7>
cmpb   $0x0,0x28(%rsp)
jne    150f <ssl3_accept+0x3df>
mov    $0x2160,%r12d
movabs $0xfffffffe00000000,%rax
ff ff ff
cmp    %rax,%rsi
je     132a <ssl3_accept+0x1fa>
mov    $0x200,%eax
movabs $0xfffffffc00000000,%rcx
ff ff ff
cmp    %rcx,%rsi
jne    1506 <ssl3_accept+0x3d6>
mov    $0x400,%eax
cmp    %eax,%r15d
jle    132a <ssl3_accept+0x1fa>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rbx,%r15
mov    %rbp,%rsi
mov    0x8(%rsp),%rdx
mov    $0x2160,%r12d
test   %eax,%eax
jg     157d <ssl3_accept+0x44d>
jmp    1791 <ssl3_accept+0x661>
mov    $0x2170,%r12d
cmp    $0xffffffff,%edx
je     132a <ssl3_accept+0x1fa>
cmpb   $0x0,0x17(%rsp)
je     132a <ssl3_accept+0x1fa>
cmpb   $0x0,0x16(%rsp)
jne    132a <ssl3_accept+0x1fa>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
test   %eax,%eax
jle    1791 <ssl3_accept+0x661>
mov    $0x2100,%r12d
movl   $0x2180,0x18(%rsp)
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
cmpl   $0xffffd000,0x68(%rsp)
ff
je     15b0 <ssl3_accept+0x480>
cmp    $0x21d0,%r12d
je     15b0 <ssl3_accept+0x480>
cmpl   $0xffffc000,0x60(%rsp)
ff
je     15b0 <ssl3_accept+0x480>
cmp    $0x2130,%r14d
je     1793 <ssl3_accept+0x663>
nopw   0x0(%rax,%rax,1)
cmpl   $0x0,0x70(%rsp)
jne    1310 <ssl3_accept+0x1e0>
jmp    132a <ssl3_accept+0x1fa>
add    $0xffffde80,%eax
rol    $0x1c,%eax
cmp    $0x6,%eax
ja     17ae <ssl3_accept+0x67e>
lea    0xa3c(%rip),%rcx
movslq (%rcx,%rax,4),%rax
add    %rcx,%rax
jmp    *%rax
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
test   %eax,%eax
jle    1791 <ssl3_accept+0x661>
mov    $0x2112,%r12d
cmp    $0x2,%eax
je     1572 <ssl3_accept+0x442>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    $0x2190,%r12d
test   %eax,%eax
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
jg     157d <ssl3_accept+0x44d>
jmp    1791 <ssl3_accept+0x661>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rbx,%r15
mov    %rbp,%rsi
mov    0x8(%rsp),%rdx
mov    $0x21a0,%r12d
jmp    1527 <ssl3_accept+0x3f7>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
mov    %rbx,%r15
mov    %rbp,%rsi
mov    0x8(%rsp),%rdx
mov    $0x21c0,%r12d
jmp    1527 <ssl3_accept+0x3f7>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
cmp    $0x4,%r13d
je     170a <ssl3_accept+0x5da>
cmp    $0x7,%r13d
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
je     1725 <ssl3_accept+0x5f5>
cmp    $0xa,%r13d
je     1793 <ssl3_accept+0x663>
mov    0x34(%rsp),%r12d
jmp    1527 <ssl3_accept+0x3f7>
cmpl   $0x0,0x50(%rsp)
je     179a <ssl3_accept+0x66a>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
cmp    $0x2,%r13d
je     1761 <ssl3_accept+0x631>
cmp    $0x8,%r13d
je     1769 <ssl3_accept+0x639>
cmp    $0x5,%r13d
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
jne    177a <ssl3_accept+0x64a>
mov    $0x6,%r13d
jmp    177a <ssl3_accept+0x64a>
xor    %eax,%eax
call   1040 <__VERIFIER_nondet_int@plt>
cmp    $0x3,%r13d
je     1735 <ssl3_accept+0x605>
cmp    $0x9,%r13d
je     173d <ssl3_accept+0x60d>
cmp    $0x6,%r13d
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
jne    174e <ssl3_accept+0x61e>
mov    $0x7,%r13d
jmp    174e <ssl3_accept+0x61e>
mov    $0x5,%r13d
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
mov    0x34(%rsp),%r12d
jmp    1527 <ssl3_accept+0x3f7>
mov    $0x8,%r13d
mov    0x34(%rsp),%r12d
jmp    1527 <ssl3_accept+0x3f7>
mov    $0x4,%r13d
jmp    1743 <ssl3_accept+0x613>
mov    $0xa,%r13d
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
mov    $0x2100,%r12d
mov    0x38(%rsp),%ecx
mov    %ecx,0x18(%rsp)
jmp    1527 <ssl3_accept+0x3f7>
mov    $0x3,%r13d
jmp    176f <ssl3_accept+0x63f>
mov    $0x9,%r13d
mov    0x8(%rsp),%rdx
mov    %rbp,%rsi
mov    %rbx,%r15
test   %eax,%eax
jle    1791 <ssl3_accept+0x661>
mov    $0x21e0,%r12d
cmpl   $0x0,0x48(%rsp)
jne    157d <ssl3_accept+0x44d>
jmp    179a <ssl3_accept+0x66a>
jmp    179f <ssl3_accept+0x66f>
xor    %eax,%eax
call   1050 <__VERIFIER_error@plt>
mov    $0xffffffff,%eax
add    $0x78,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret
xor    %eax,%eax
cmp    $0x3,%r14d
sete   %al
add    %eax,%eax
add    $0xffffffff,%eax
jmp    179f <ssl3_accept+0x66f>

LLVM IR (-O0):
define i32 @ssl3_accept(i32 %0) {
%2 = alloca i32
%3 = alloca i32
%4 = alloca i32
%5 = alloca i32
%6 = alloca i32
%7 = alloca i32
%8 = alloca i32
%9 = alloca i32
%10 = alloca i32
%11 = alloca i32
%12 = alloca i32
%13 = alloca i32
%14 = alloca i32
%15 = alloca i32
%16 = alloca i32
%17 = alloca i32
%18 = alloca i32
%19 = alloca i32
%20 = alloca i32
%21 = alloca i32
%22 = alloca i32
%23 = alloca i32
%24 = alloca i32
%25 = alloca i32
%26 = alloca i32
%27 = alloca i32
%28 = alloca i32
%29 = alloca i32
%30 = alloca i32
%31 = alloca i32
%32 = alloca i32
%33 = alloca i32
%34 = alloca i32
%35 = alloca i64
%36 = alloca i64
%37 = alloca i64
%38 = alloca i32
%39 = alloca i64
%40 = alloca i32
%41 = alloca i32
%42 = alloca i32
%43 = alloca i32
%44 = alloca i32
%45 = alloca i32
%46 = alloca i32
%47 = alloca i32
%48 = alloca i32
%49 = alloca i32
%50 = alloca i32
%51 = alloca i32
%52 = alloca i64
%53 = alloca i32
%54 = alloca i32
%55 = alloca i32
%56 = alloca i32
%57 = alloca i64
%58 = alloca i64
%59 = alloca i64
%60 = alloca i64
%61 = alloca i32
%62 = alloca i64
store i32 %0, i32* %3
%63 = call i8* (...) @__VERIFIER_nondet_int()
%64 = ptrtoint i8* %63 to i32
store i32 %64, i32* %4
%65 = call i8* (...) @__VERIFIER_nondet_int()
%66 = ptrtoint i8* %65 to i32
store i32 %66, i32* %5
%67 = call i8* (...) @__VERIFIER_nondet_int()
%68 = ptrtoint i8* %67 to i32
store i32 %68, i32* %9
%69 = call i8* (...) @__VERIFIER_nondet_int()
%70 = ptrtoint i8* %69 to i32
store i32 %70, i32* %12
%71 = call i8* (...) @__VERIFIER_nondet_int()
%72 = ptrtoint i8* %71 to i32
store i32 %72, i32* %15
%73 = call i8* (...) @__VERIFIER_nondet_int()
%74 = ptrtoint i8* %73 to i32
store i32 %74, i32* %17
%75 = call i8* (...) @__VERIFIER_nondet_int()
%76 = ptrtoint i8* %75 to i32
store i32 %76, i32* %18
%77 = call i8* (...) @__VERIFIER_nondet_int()
%78 = ptrtoint i8* %77 to i32
store i32 %78, i32* %19
%79 = call i8* (...) @__VERIFIER_nondet_int()
%80 = ptrtoint i8* %79 to i32
store i32 %80, i32* %20
%81 = call i8* (...) @__VERIFIER_nondet_int()
%82 = ptrtoint i8* %81 to i32
store i32 %82, i32* %21
%83 = call i8* (...) @__VERIFIER_nondet_int()
%84 = ptrtoint i8* %83 to i32
store i32 %84, i32* %22
%85 = call i8* (...) @__VERIFIER_nondet_int()
%86 = ptrtoint i8* %85 to i32
store i32 %86, i32* %23
%87 = call i8* (...) @__VERIFIER_nondet_int()
%88 = ptrtoint i8* %87 to i32
store i32 %88, i32* %24
%89 = call i8* (...) @__VERIFIER_nondet_int()
%90 = ptrtoint i8* %89 to i32
store i32 %90, i32* %25
%91 = call i8* (...) @__VERIFIER_nondet_int()
%92 = ptrtoint i8* %91 to i32
store i32 %92, i32* %29
%93 = call i8* (...) @__VERIFIER_nondet_int()
%94 = ptrtoint i8* %93 to i32
store i32 %94, i32* %30
%95 = call i8* (...) @__VERIFIER_nondet_int()
%96 = ptrtoint i8* %95 to i32
store i32 %96, i32* %32
%97 = call i64 (...) @__VERIFIER_nondet_long()
store i64 %97, i64* %39
%98 = call i8* (...) @__VERIFIER_nondet_int()
%99 = ptrtoint i8* %98 to i32
store i32 %99, i32* %45
%100 = call i8* (...) @__VERIFIER_nondet_int()
%101 = ptrtoint i8* %100 to i32
store i32 %101, i32* %46
%102 = call i8* (...) @__VERIFIER_nondet_int()
%103 = ptrtoint i8* %102 to i32
store i32 %103, i32* %47
%104 = call i8* (...) @__VERIFIER_nondet_int()
%105 = ptrtoint i8* %104 to i32
store i32 %105, i32* %48
%106 = call i8* (...) @__VERIFIER_nondet_int()
%107 = ptrtoint i8* %106 to i32
store i32 %107, i32* %49
%108 = call i8* (...) @__VERIFIER_nondet_int()
%109 = ptrtoint i8* %108 to i32
store i32 %109, i32* %50
%110 = call i64 (...) @__VERIFIER_nondet_long()
store i64 %110, i64* %52
%111 = call i8* (...) @__VERIFIER_nondet_int()
%112 = ptrtoint i8* %111 to i32
store i32 %112, i32* %53
%113 = call i8* (...) @__VERIFIER_nondet_int()
%114 = ptrtoint i8* %113 to i32
store i32 %114, i32* %54
store i32 0, i32* %27
%115 = load i32, i32* %3
store i32 %115, i32* %6
store i32 0, i32* %55
%116 = call i8* (...) @__VERIFIER_nondet_int()
%117 = ptrtoint i8* %116 to i64
store i64 %117, i64* %37
%118 = load i64, i64* %37
store i64 %118, i64* %36
store i32 0, i32* %38
store i32 -1, i32* %40
store i32 0, i32* %43
store i32 0, i32* %44
%119 = load i32, i32* %4
%120 = icmp ne i32 %119, 0
br i1 %120, label %121, label %123
121: ; preds = %1
%122 = load i32, i32* %4
store i32 %122, i32* %38
br label %129
123: ; preds = %1
%124 = load i32, i32* %22
%125 = icmp ne i32 %124, 0
br i1 %125, label %126, label %128
126: ; preds = %123
%127 = load i32, i32* %22
store i32 %127, i32* %38
br label %128
128: ; preds = %126, %123
br label %129
129: ; preds = %128, %121
%130 = load i32, i32* %5
%131 = add nsw i32 %130, 1
store i32 %131, i32* %5
%132 = load i32, i32* %45
%133 = add nsw i32 %132, 12288
%134 = icmp ne i32 %133, 0
br i1 %134, label %135, label %141
135: ; preds = %129
%136 = load i32, i32* %46
%137 = add nsw i32 %136, 16384
%138 = icmp ne i32 %137, 0
br i1 %138, label %139, label %140
139: ; preds = %135
br label %140
140: ; preds = %139, %135
br label %141
141: ; preds = %140, %129
%142 = load i32, i32* %17
%143 = icmp eq i32 %142, 0
br i1 %143, label %144, label %145
144: ; preds = %141
store i32 -1, i32* %2
br label %745
145: ; preds = %141
br label %146
146: ; preds = %145, %733
br label %147
147: ; preds = %146
%148 = load i32, i32* %6
store i32 %148, i32* %42
%149 = load i32, i32* %6
%150 = icmp eq i32 %149, 12292
br i1 %150, label %151, label %152
151: ; preds = %147
br label %291
152: ; preds = %147
%153 = load i32, i32* %6
%154 = icmp eq i32 %153, 16384
br i1 %154, label %155, label %156
155: ; preds = %152
br label %292
156: ; preds = %152
%157 = load i32, i32* %6
%158 = icmp eq i32 %157, 8192
br i1 %158, label %159, label %160
159: ; preds = %156
br label %293
160: ; preds = %156
%161 = load i32, i32* %6
%162 = icmp eq i32 %161, 24576
br i1 %162, label %163, label %164
163: ; preds = %160
br label %294
164: ; preds = %160
%165 = load i32, i32* %6
%166 = icmp eq i32 %165, 8195
br i1 %166, label %167, label %168
167: ; preds = %164
br label %295
168: ; preds = %164
%169 = load i32, i32* %6
%170 = icmp eq i32 %169, 8480
br i1 %170, label %171, label %172
171: ; preds = %168
br label %338
172: ; preds = %168
%173 = load i32, i32* %6
%174 = icmp eq i32 %173, 8481
br i1 %174, label %175, label %176
175: ; preds = %172
br label %339
176: ; preds = %172
%177 = load i32, i32* %6
%178 = icmp eq i32 %177, 8482
br i1 %178, label %179, label %180
179: ; preds = %176
br label %346
180: ; preds = %176
%181 = load i32, i32* %6
%182 = icmp eq i32 %181, 8464
br i1 %182, label %183, label %184
183: ; preds = %180
br label %347
184: ; preds = %180
%185 = load i32, i32* %6
%186 = icmp eq i32 %185, 8465
br i1 %186, label %187, label %188
187: ; preds = %184
br label %348
188: ; preds = %184
%189 = load i32, i32* %6
%190 = icmp eq i32 %189, 8466
br i1 %190, label %191, label %192
191: ; preds = %188
br label %349
192: ; preds = %188
%193 = load i32, i32* %6
%194 = icmp eq i32 %193, 8496
br i1 %194, label %195, label %196
195: ; preds = %192
br label %360
196: ; preds = %192
%197 = load i32, i32* %6
%198 = icmp eq i32 %197, 8497
br i1 %198, label %199, label %200
199: ; preds = %196
br label %361
200: ; preds = %196
%201 = load i32, i32* %6
%202 = icmp eq i32 %201, 8512
br i1 %202, label %203, label %204
203: ; preds = %200
br label %377
204: ; preds = %200
%205 = load i32, i32* %6
%206 = icmp eq i32 %205, 8513
br i1 %206, label %207, label %208
207: ; preds = %204
br label %378
208: ; preds = %204
%209 = load i32, i32* %6
%210 = icmp eq i32 %209, 8528
br i1 %210, label %211, label %212
211: ; preds = %208
br label %393
212: ; preds = %208
%213 = load i32, i32* %6
%214 = icmp eq i32 %213, 8529
br i1 %214, label %215, label %216
215: ; preds = %212
br label %394
216: ; preds = %212
%217 = load i32, i32* %6
%218 = icmp eq i32 %217, 8544
br i1 %218, label %219, label %220
219: ; preds = %216
br label %458
220: ; preds = %216
%221 = load i32, i32* %6
%222 = icmp eq i32 %221, 8545
br i1 %222, label %223, label %224
223: ; preds = %220
br label %459
224: ; preds = %220
%225 = load i32, i32* %6
%226 = icmp eq i32 %225, 8560
br i1 %226, label %227, label %228
227: ; preds = %224
br label %499
228: ; preds = %224
%229 = load i32, i32* %6
%230 = icmp eq i32 %229, 8561
br i1 %230, label %231, label %232
231: ; preds = %228
br label %500
232: ; preds = %228
%233 = load i32, i32* %6
%234 = icmp eq i32 %233, 8448
br i1 %234, label %235, label %236
235: ; preds = %232
br label %507
236: ; preds = %232
%237 = load i32, i32* %6
%238 = icmp eq i32 %237, 8576
br i1 %238, label %239, label %240
239: ; preds = %236
br label %518
240: ; preds = %236
%241 = load i32, i32* %6
%242 = icmp eq i32 %241, 8577
br i1 %242, label %243, label %244
243: ; preds = %240
br label %519
244: ; preds = %240
%245 = load i32, i32* %6
%246 = icmp eq i32 %245, 8592
br i1 %246, label %247, label %248
247: ; preds = %244
br label %537
248: ; preds = %244
%249 = load i32, i32* %6
%250 = icmp eq i32 %249, 8593
br i1 %250, label %251, label %252
251: ; preds = %248
br label %538
252: ; preds = %248
%253 = load i32, i32* %6
%254 = icmp eq i32 %253, 8608
br i1 %254, label %255, label %256
255: ; preds = %252
br label %545
256: ; preds = %252
%257 = load i32, i32* %6
%258 = icmp eq i32 %257, 8609
br i1 %258, label %259, label %260
259: ; preds = %256
br label %546
260: ; preds = %256
%261 = load i32, i32* %6
%262 = icmp eq i32 %261, 8640
br i1 %262, label %263, label %264
263: ; preds = %260
br label %553
264: ; preds = %260
%265 = load i32, i32* %6
%266 = icmp eq i32 %265, 8641
br i1 %266, label %267, label %268
267: ; preds = %264
br label %554
268: ; preds = %264
%269 = load i32, i32* %6
%270 = icmp eq i32 %269, 8656
br i1 %270, label %271, label %272
271: ; preds = %268
br label %580
272: ; preds = %268
%273 = load i32, i32* %6
%274 = icmp eq i32 %273, 8657
br i1 %274, label %275, label %276
275: ; preds = %272
br label %581
276: ; preds = %272
%277 = load i32, i32* %6
%278 = icmp eq i32 %277, 8672
br i1 %278, label %279, label %280
279: ; preds = %276
br label %611
280: ; preds = %276
%281 = load i32, i32* %6
%282 = icmp eq i32 %281, 8673
br i1 %282, label %283, label %284
283: ; preds = %280
br label %612
284: ; preds = %280
%285 = load i32, i32* %6
%286 = icmp eq i32 %285, 3
br i1 %286, label %287, label %288
287: ; preds = %284
br label %638
288: ; preds = %284
br label %649
289: ; No predecessors!
br i1 false, label %290, label %650
290: ; preds = %289
br label %291
291: ; preds = %290, %151
store i32 1, i32* %7
br label %292
292: ; preds = %291, %155
br label %293
293: ; preds = %292, %159
br label %294
294: ; preds = %293, %163
br label %295
295: ; preds = %294, %167
store i32 1, i32* %8
%296 = load i32, i32* %38
%297 = icmp ne i32 %296, 0
br i1 %297, label %298, label %299
298: ; preds = %295
br label %299
299: ; preds = %298, %295
%300 = load i32, i32* %9
%301 = mul nsw i32 %300, 8
store i32 %301, i32* %56
%302 = load i32, i32* %56
%303 = icmp ne i32 %302, 3
br i1 %303, label %304, label %305
304: ; preds = %299
store i32 -1, i32* %2
br label %745
305: ; preds = %299
store i32 8192, i32* %10
%306 = load i32, i32* %14
%307 = icmp eq i32 %306, 0
br i1 %307, label %308, label %320
308: ; preds = %305
%309 = call i8* (...) @__VERIFIER_nondet_int()
%310 = ptrtoint i8* %309 to i32
store i32 %310, i32* %34
%311 = load i32, i32* %34
%312 = icmp eq i32 %311, 0
br i1 %312, label %313, label %314
313: ; preds = %308
store i32 -1, i32* %40
br label %735
314: ; preds = %308
%315 = load i32, i32* %47
%316 = icmp ne i32 %315, 0
br i1 %316, label %318, label %317
317: ; preds = %314
store i32 -1, i32* %40
br label %735
318: ; preds = %314
%319 = load i32, i32* %34
store i32 %319, i32* %14
br label %320
320: ; preds = %318, %305
%321 = load i32, i32* %48
%322 = icmp ne i32 %321, 0
br i1 %322, label %324, label %323
323: ; preds = %320
store i32 -1, i32* %40
br label %735
324: ; preds = %320
store i32 0, i32* %11
%325 = load i32, i32* %6
%326 = icmp ne i32 %325, 12292
br i1 %326, label %327, label %334
327: ; preds = %324
%328 = load i32, i32* %49
%329 = icmp ne i32 %328, 0
br i1 %329, label %331, label %330
330: ; preds = %327
store i32 -1, i32* %40
br label %735
331: ; preds = %327
store i32 8464, i32* %6
%332 = load i32, i32* %24
%333 = add nsw i32 %332, 1
store i32 %333, i32* %24
br label %337
334: ; preds = %324
%335 = load i32, i32* %23
%336 = add nsw i32 %335, 1
store i32 %336, i32* %23
store i32 8480, i32* %6
br label %337
337: ; preds = %334, %331
br label %651
338: ; preds = %171
br label %339
339: ; preds = %338, %175
store i32 0, i32* %16
%340 = call i8* (...) @__VERIFIER_nondet_int()
%341 = ptrtoint i8* %340 to i32
store i32 %341, i32* %40
%342 = load i32, i32* %40
%343 = icmp sle i32 %342, 0
br i1 %343, label %344, label %345
344: ; preds = %339
br label %735
345: ; preds = %339
store i32 8482, i32* %31
store i32 8448, i32* %6
store i32 0, i32* %11
br label %651
346: ; preds = %179
store i32 3, i32* %6
br label %651
347: ; preds = %183
br label %348
348: ; preds = %347, %187
br label %349
349: ; preds = %348, %191
store i32 0, i32* %16
%350 = call i8* (...) @__VERIFIER_nondet_int()
%351 = ptrtoint i8* %350 to i32
store i32 %351, i32* %40
%352 = load i32, i32* %55
%353 = icmp eq i32 %352, 0
br i1 %353, label %354, label %355
354: ; preds = %349
store i32 1, i32* %55
br label %355
355: ; preds = %354, %349
%356 = load i32, i32* %40
%357 = icmp sle i32 %356, 0
br i1 %357, label %358, label %359
358: ; preds = %355
br label %735
359: ; preds = %355
store i32 1, i32* %44
store i32 8496, i32* %6
store i32 0, i32* %11
br label %651
360: ; preds = %195
br label %361
361: ; preds = %360, %199
%362 = call i8* (...) @__VERIFIER_nondet_int()
%363 = ptrtoint i8* %362 to i32
store i32 %363, i32* %40
%364 = load i32, i32* %55
%365 = icmp eq i32 %364, 1
br i1 %365, label %366, label %367
366: ; preds = %361
store i32 2, i32* %55
br label %367
367: ; preds = %366, %361
%368 = load i32, i32* %40
%369 = icmp sle i32 %368, 0
br i1 %369, label %370, label %371
370: ; preds = %367
br label %735
371: ; preds = %367
%372 = load i32, i32* %12
%373 = icmp ne i32 %372, 0
br i1 %373, label %374, label %375
374: ; preds = %371
store i32 8656, i32* %6
br label %376
375: ; preds = %371
store i32 8512, i32* %6
br label %376
376: ; preds = %375, %374
store i32 0, i32* %11
br label %651
377: ; preds = %203
br label %378
378: ; preds = %377, %207
%379 = load i32, i32* %30
%380 = sext i32 %379 to i64
store i64 %380, i64* %57
%381 = load i64, i64* %57
%382 = add i64 %381, 256
%383 = icmp ne i64 %382, 0
br i1 %383, label %384, label %385
384: ; preds = %378
store i32 1, i32* %43
br label %392
385: ; preds = %378
%386 = call i8* (...) @__VERIFIER_nondet_int()
%387 = ptrtoint i8* %386 to i32
store i32 %387, i32* %40
%388 = load i32, i32* %40
%389 = icmp sle i32 %388, 0
br i1 %389, label %390, label %391
390: ; preds = %385
br label %735
391: ; preds = %385
br label %392
392: ; preds = %391, %384
store i32 8528, i32* %6
store i32 0, i32* %11
br label %651
393: ; preds = %211
br label %394
394: ; preds = %393, %215
%395 = load i32, i32* %30
%396 = sext i32 %395 to i64
store i64 %396, i64* %35
%397 = load i32, i32* %18
%398 = sext i32 %397 to i64
store i64 %398, i64* %58
%399 = load i64, i64* %58
%400 = add i64 %399, 2097152
%401 = icmp ne i64 %400, 0
br i1 %401, label %402, label %403
402: ; preds = %394
store i32 1, i32* %28
br label %404
403: ; preds = %394
store i32 0, i32* %28
br label %404
404: ; preds = %403, %402
%405 = load i32, i32* %28
%406 = icmp ne i32 %405, 0
br i1 %406, label %407, label %408
407: ; preds = %404
br label %442
408: ; preds = %404
%409 = load i64, i64* %35
%410 = add i64 %409, 30
%411 = icmp ne i64 %410, 0
br i1 %411, label %412, label %413
412: ; preds = %408
br label %442
413: ; preds = %408
%414 = load i64, i64* %35
%415 = add i64 %414, 1
%416 = icmp ne i64 %415, 0
br i1 %416, label %417, label %454
417: ; preds = %413
%418 = load i32, i32* %21
%419 = icmp eq i32 %418, 0
br i1 %419, label %420, label %421
420: ; preds = %417
br label %442
421: ; preds = %417
%422 = load i32, i32* %32
%423 = sext i32 %422 to i64
store i64 %423, i64* %59
%424 = load i64, i64* %59
%425 = add i64 %424, 2
%426 = icmp ne i64 %425, 0
br i1 %426, label %427, label %451
427: ; preds = %421
%428 = load i32, i32* %32
%429 = sext i32 %428 to i64
store i64 %429, i64* %60
%430 = load i64, i64* %60
%431 = add i64 %430, 4
%432 = icmp ne i64 %431, 0
br i1 %432, label %433, label %434
433: ; preds = %427
store i32 512, i32* %51
br label %435
434: ; preds = %427
store i32 1024, i32* %51
br label %435
435: ; preds = %434, %433
%436 = load i32, i32* %50
%437 = mul nsw i32 %436, 8
store i32 %437, i32* %61
%438 = load i32, i32* %61
%439 = load i32, i32* %51
%440 = icmp sgt i32 %438, %439
br i1 %440, label %441, label %449
441: ; preds = %435
br label %442
442: ; preds = %441, %420, %412, %407
%443 = call i8* (...) @__VERIFIER_nondet_int()
%444 = ptrtoint i8* %443 to i32
store i32 %444, i32* %40
%445 = load i32, i32* %40
%446 = icmp sle i32 %445, 0
br i1 %446, label %447, label %448
447: ; preds = %442
br label %735
448: ; preds = %442
br label %450
449: ; preds = %435
store i32 1, i32* %43
br label %450
450: ; preds = %449, %448
br label %452
451: ; preds = %421
store i32 1, i32* %43
br label %452
452: ; preds = %451, %450
br label %453
453: ; preds = %452
br label %455
454: ; preds = %413
store i32 1, i32* %43
br label %455
455: ; preds = %454, %453
br label %456
456: ; preds = %455
br label %457
457: ; preds = %456
store i32 8544, i32* %6
store i32 0, i32* %11
br label %651
458: ; preds = %219
br label %459
459: ; preds = %458, %223
%460 = load i32, i32* %19
%461 = add nsw i32 %460, 1
%462 = icmp ne i32 %461, 0
br i1 %462, label %463, label %497
463: ; preds = %459
%464 = load i32, i32* %20
%465 = icmp ne i32 %464, 0
br i1 %465, label %466, label %473
466: ; preds = %463
%467 = load i32, i32* %19
%468 = add nsw i32 %467, 4
%469 = icmp ne i32 %468, 0
br i1 %469, label %470, label %471
470: ; preds = %466
store i32 1, i32* %43
store i32 0, i32* %26
store i32 8560, i32* %6
br label %472
471: ; preds = %466
br label %474
472: ; preds = %470
br label %496
473: ; preds = %463
br label %474
474: ; preds = %473, %471
%475 = load i32, i32* %30
%476 = sext i32 %475 to i64
store i64 %476, i64* %62
%477 = load i64, i64* %62
%478 = add i64 %477, 256
%479 = icmp ne i64 %478, 0
br i1 %479, label %480, label %487
480: ; preds = %474
%481 = load i32, i32* %19
%482 = add nsw i32 %481, 2
%483 = icmp ne i32 %482, 0
br i1 %483, label %484, label %485
484: ; preds = %480
br label %488
485: ; preds = %480
store i32 1, i32* %43
store i32 0, i32* %26
store i32 8560, i32* %6
br label %486
486: ; preds = %485
br label %495
487: ; preds = %474
br label %488
488: ; preds = %487, %484
store i32 1, i32* %26
%489 = call i8* (...) @__VERIFIER_nondet_int()
%490 = ptrtoint i8* %489 to i32
store i32 %490, i32* %40
%491 = load i32, i32* %40
%492 = icmp sle i32 %491, 0
br i1 %492, label %493, label %494
493: ; preds = %488
br label %735
494: ; preds = %488
store i32 8448, i32* %6
store i32 8576, i32* %31
store i32 0, i32* %11
br label %495
495: ; preds = %494, %486
br label %496
496: ; preds = %495, %472
br label %498
497: ; preds = %459
store i32 1, i32* %43
store i32 0, i32* %26
store i32 8560, i32* %6
br label %498
498: ; preds = %497, %496
br label %651
499: ; preds = %227
br label %500
500: ; preds = %499, %231
%501 = call i8* (...) @__VERIFIER_nondet_int()
%502 = ptrtoint i8* %501 to i32
store i32 %502, i32* %40
%503 = load i32, i32* %40
%504 = icmp sle i32 %503, 0
br i1 %504, label %505, label %506
505: ; preds = %500
br label %735
506: ; preds = %500
store i32 8576, i32* %31
store i32 8448, i32* %6
store i32 0, i32* %11
br label %651
507: ; preds = %235
%508 = load i64, i64* %39
%509 = icmp sgt i64 %508, 0
br i1 %509, label %510, label %516
510: ; preds = %507
store i32 2, i32* %13
%511 = load i64, i64* %52
store i64 %511, i64* %39
%512 = load i64, i64* %39
%513 = icmp sle i64 %512, 0
br i1 %513, label %514, label %515
514: ; preds = %510
store i32 -1, i32* %40
br label %735
515: ; preds = %510
store i32 1, i32* %13
br label %516
516: ; preds = %515, %507
%517 = load i32, i32* %31
store i32 %517, i32* %6
br label %651
518: ; preds = %239
br label %519
519: ; preds = %518, %243
%520 = call i8* (...) @__VERIFIER_nondet_int()
%521 = ptrtoint i8* %520 to i32
store i32 %521, i32* %40
%522 = load i32, i32* %40
%523 = icmp sle i32 %522, 0
br i1 %523, label %524, label %525
524: ; preds = %519
br label %735
525: ; preds = %519
%526 = load i32, i32* %40
%527 = icmp eq i32 %526, 2
br i1 %527, label %528, label %529
528: ; preds = %525
store i32 8466, i32* %6
br label %536
529: ; preds = %525
%530 = call i8* (...) @__VERIFIER_nondet_int()
%531 = ptrtoint i8* %530 to i32
store i32 %531, i32* %40
%532 = load i32, i32* %40
%533 = icmp sle i32 %532, 0
br i1 %533, label %534, label %535
534: ; preds = %529
br label %735
535: ; preds = %529
store i32 0, i32* %11
store i32 8592, i32* %6
br label %536
536: ; preds = %535, %528
br label %651
537: ; preds = %247
br label %538
538: ; preds = %537, %251
%539 = call i8* (...) @__VERIFIER_nondet_int()
%540 = ptrtoint i8* %539 to i32
store i32 %540, i32* %40
%541 = load i32, i32* %40
%542 = icmp sle i32 %541, 0
br i1 %542, label %543, label %544
543: ; preds = %538
br label %735
544: ; preds = %538
store i32 8608, i32* %6
store i32 0, i32* %11
br label %651
545: ; preds = %255
br label %546
546: ; preds = %545, %259
%547 = call i8* (...) @__VERIFIER_nondet_int()
%548 = ptrtoint i8* %547 to i32
store i32 %548, i32* %40
%549 = load i32, i32* %40
%550 = icmp sle i32 %549, 0
br i1 %550, label %551, label %552
551: ; preds = %546
br label %735
552: ; preds = %546
store i32 8640, i32* %6
store i32 0, i32* %11
br label %651
553: ; preds = %263
br label %554
554: ; preds = %553, %267
%555 = call i8* (...) @__VERIFIER_nondet_int()
%556 = ptrtoint i8* %555 to i32
store i32 %556, i32* %40
%557 = load i32, i32* %55
%558 = icmp eq i32 %557, 4
br i1 %558, label %559, label %560
559: ; preds = %554
store i32 5, i32* %55
br label %570
560: ; preds = %554
%561 = load i32, i32* %55
%562 = icmp eq i32 %561, 7
br i1 %562, label %563, label %564
563: ; preds = %560
store i32 8, i32* %55
br label %569
564: ; preds = %560
%565 = load i32, i32* %55
%566 = icmp eq i32 %565, 10
br i1 %566, label %567, label %568
567: ; preds = %564
br label %743
568: ; preds = %564
br label %569
569: ; preds = %568, %563
br label %570
570: ; preds = %569, %559
%571 = load i32, i32* %40
%572 = icmp sle i32 %571, 0
br i1 %572, label %573, label %574
573: ; preds = %570
br label %735
574: ; preds = %570
%575 = load i32, i32* %12
%576 = icmp ne i32 %575, 0
br i1 %576, label %577, label %578
577: ; preds = %574
store i32 3, i32* %6
br label %579
578: ; preds = %574
store i32 8656, i32* %6
br label %579
579: ; preds = %578, %577
store i32 0, i32* %11
br label %651
580: ; preds = %271
br label %581
581: ; preds = %580, %275
%582 = load i32, i32* %29
store i32 %582, i32* %33
%583 = load i32, i32* %53
%584 = icmp ne i32 %583, 0
br i1 %584, label %586, label %585
585: ; preds = %581
store i32 -1, i32* %40
br label %735
586: ; preds = %581
%587 = call i8* (...) @__VERIFIER_nondet_int()
%588 = ptrtoint i8* %587 to i32
store i32 %588, i32* %40
%589 = load i32, i32* %55
%590 = icmp eq i32 %589, 2
br i1 %590, label %591, label %592
591: ; preds = %586
store i32 3, i32* %55
br label %602
592: ; preds = %586
%593 = load i32, i32* %55
%594 = icmp eq i32 %593, 5
br i1 %594, label %595, label %596
595: ; preds = %592
store i32 6, i32* %55
br label %601
596: ; preds = %592
%597 = load i32, i32* %55
%598 = icmp eq i32 %597, 8
br i1 %598, label %599, label %600
599: ; preds = %596
store i32 9, i32* %55
br label %600
600: ; preds = %599, %596
br label %601
601: ; preds = %600, %595
br label %602
602: ; preds = %601, %591
%603 = load i32, i32* %40
%604 = icmp sle i32 %603, 0
br i1 %604, label %605, label %606
605: ; preds = %602
br label %735
606: ; preds = %602
store i32 8672, i32* %6
store i32 0, i32* %11
%607 = load i32, i32* %54
%608 = icmp ne i32 %607, 0
br i1 %608, label %610, label %609
609: ; preds = %606
store i32 -1, i32* %40
br label %735
610: ; preds = %606
br label %651
611: ; preds = %279
br label %612
612: ; preds = %611, %283
%613 = call i8* (...) @__VERIFIER_nondet_int()
%614 = ptrtoint i8* %613 to i32
store i32 %614, i32* %40
%615 = load i32, i32* %55
%616 = icmp eq i32 %615, 3
br i1 %616, label %617, label %618
617: ; preds = %612
store i32 4, i32* %55
br label %628
618: ; preds = %612
%619 = load i32, i32* %55
%620 = icmp eq i32 %619, 6
br i1 %620, label %621, label %622
621: ; preds = %618
store i32 7, i32* %55
br label %627
622: ; preds = %618
%623 = load i32, i32* %55
%624 = icmp eq i32 %623, 9
br i1 %624, label %625, label %626
625: ; preds = %622
store i32 10, i32* %55
br label %626
626: ; preds = %625, %622
br label %627
627: ; preds = %626, %621
br label %628
628: ; preds = %627, %617
%629 = load i32, i32* %40
%630 = icmp sle i32 %629, 0
br i1 %630, label %631, label %632
631: ; preds = %628
br label %735
632: ; preds = %628
store i32 8448, i32* %6
%633 = load i32, i32* %12
%634 = icmp ne i32 %633, 0
br i1 %634, label %635, label %636
635: ; preds = %632
store i32 8640, i32* %31
br label %637
636: ; preds = %632
store i32 3, i32* %31
br label %637
637: ; preds = %636, %635
store i32 0, i32* %11
br label %651
638: ; preds = %287
store i32 0, i32* %14
store i32 0, i32* %11
%639 = load i32, i32* %44
%640 = icmp ne i32 %639, 0
br i1 %640, label %641, label %648
641: ; preds = %638
store i32 0, i32* %7
%642 = load i32, i32* %25
%643 = add nsw i32 %642, 1
store i32 %643, i32* %25
%644 = load i32, i32* %38
%645 = icmp ne i32 %644, 0
br i1 %645, label %646, label %647
646: ; preds = %641
br label %647
647: ; preds = %646, %641
br label %648
648: ; preds = %647, %638
store i32 1, i32* %40
br label %735
649: ; preds = %288
store i32 -1, i32* %40
br label %735
650: ; preds = %289
br label %651
651: ; preds = %650, %637, %610, %579, %552, %544, %536, %516, %506, %498, %457, %392, %376, %359, %346, %345, %337
br label %652
652: ; preds = %651
br label %653
653: ; preds = %652
br label %654
654: ; preds = %653
br label %655
655: ; preds = %654
br label %656
656: ; preds = %655
br label %657
657: ; preds = %656
br label %658
658: ; preds = %657
br label %659
659: ; preds = %658
br label %660
660: ; preds = %659
br label %661
661: ; preds = %660
br label %662
662: ; preds = %661
br label %663
663: ; preds = %662
br label %664
664: ; preds = %663
br label %665
665: ; preds = %664
br label %666
666: ; preds = %665
br label %667
667: ; preds = %666
br label %668
668: ; preds = %667
br label %669
669: ; preds = %668
br label %670
670: ; preds = %669
br label %671
671: ; preds = %670
br label %672
672: ; preds = %671
br label %673
673: ; preds = %672
br label %674
674: ; preds = %673
br label %675
675: ; preds = %674
br label %676
676: ; preds = %675
br label %677
677: ; preds = %676
br label %678
678: ; preds = %677
br label %679
679: ; preds = %678
br label %680
680: ; preds = %679
br label %681
681: ; preds = %680
br label %682
682: ; preds = %681
br label %683
683: ; preds = %682
br label %684
684: ; preds = %683
br label %685
685: ; preds = %684
br label %686
686: ; preds = %685
br label %687
687: ; preds = %686
%688 = load i32, i32* %27
%689 = icmp ne i32 %688, 0
br i1 %689, label %733, label %690
690: ; preds = %687
%691 = load i32, i32* %43
%692 = icmp ne i32 %691, 0
br i1 %692, label %732, label %693
693: ; preds = %690
%694 = load i32, i32* %45
%695 = icmp ne i32 %694, -12288
br i1 %695, label %696, label %709
696: ; preds = %693
%697 = load i32, i32* %6
%698 = icmp ne i32 %697, 8656
br i1 %698, label %699, label %708
699: ; preds = %696
%700 = load i32, i32* %46
%701 = icmp ne i32 %700, -16384
br i1 %701, label %702, label %707
702: ; preds = %699
%703 = load i32, i32* %42
%704 = icmp eq i32 %703, 8496
br i1 %704, label %705, label %706
705: ; preds = %702
br label %743
706: ; preds = %702
br label %707
707: ; preds = %706, %699
br label %708
708: ; preds = %707, %696
br label %709
709: ; preds = %708, %693
%710 = load i32, i32* %15
%711 = icmp ne i32 %710, 0
br i1 %711, label %712, label %719
712: ; preds = %709
%713 = call i8* (...) @__VERIFIER_nondet_int()
%714 = ptrtoint i8* %713 to i32
store i32 %714, i32* %40
%715 = load i32, i32* %40
%716 = icmp sle i32 %715, 0
br i1 %716, label %717, label %718
717: ; preds = %712
br label %735
718: ; preds = %712
br label %719
719: ; preds = %718, %709
%720 = load i32, i32* %38
%721 = icmp ne i32 %720, 0
br i1 %721, label %722, label %731
722: ; preds = %719
%723 = load i32, i32* %6
%724 = load i32, i32* %42
%725 = icmp ne i32 %723, %724
br i1 %725, label %726, label %730
726: ; preds = %722
%727 = load i32, i32* %6
store i32 %727, i32* %41
%728 = load i32, i32* %42
store i32 %728, i32* %6
%729 = load i32, i32* %41
store i32 %729, i32* %6
br label %730
730: ; preds = %726, %722
br label %731
731: ; preds = %730, %719
br label %732
732: ; preds = %731, %690
br label %733
733: ; preds = %732, %687
store i32 0, i32* %43
br label %146
734: ; No predecessors!
br label %735
735: ; preds = %734, %717, %649, %648, %631, %609, %605, %585, %573, %551, %543, %534, %524, %514, %505, %493, %447, %390, %370, %358, %344, %330, %323, %317, %313
%736 = load i32, i32* %5
%737 = add nsw i32 %736, -1
store i32 %737, i32* %5
%738 = load i32, i32* %38
%739 = icmp ne i32 %738, 0
br i1 %739, label %740, label %741
740: ; preds = %735
br label %741
741: ; preds = %740, %735
%742 = load i32, i32* %40
store i32 %742, i32* %2
br label %745
743: ; preds = %705, %567
%744 = call i32 (...) @__VERIFIER_error()
store i32 -1, i32* %2
br label %745
745: ; preds = %743, %741, %304, %144
%746 = load i32, i32* %2
ret i32 %746
}

LLVM IR (-O2):
define i32 @ssl3_accept(i32 %0) {
%2 = tail call i8* (...) @__VERIFIER_nondet_int()
%3 = tail call i8* (...) @__VERIFIER_nondet_int()
%4 = tail call i8* (...) @__VERIFIER_nondet_int()
%5 = tail call i8* (...) @__VERIFIER_nondet_int()
%6 = tail call i8* (...) @__VERIFIER_nondet_int()
%7 = tail call i8* (...) @__VERIFIER_nondet_int()
%8 = ptrtoint i8* %7 to i64
%9 = trunc i64 %8 to i32
%10 = tail call i8* (...) @__VERIFIER_nondet_int()
%11 = tail call i8* (...) @__VERIFIER_nondet_int()
%12 = ptrtoint i8* %11 to i64
%13 = trunc i64 %12 to i32
%14 = tail call i8* (...) @__VERIFIER_nondet_int()
%15 = tail call i8* (...) @__VERIFIER_nondet_int()
%16 = tail call i8* (...) @__VERIFIER_nondet_int()
%17 = tail call i8* (...) @__VERIFIER_nondet_int()
%18 = tail call i8* (...) @__VERIFIER_nondet_int()
%19 = tail call i8* (...) @__VERIFIER_nondet_int()
%20 = tail call i8* (...) @__VERIFIER_nondet_int()
%21 = tail call i8* (...) @__VERIFIER_nondet_int()
%22 = tail call i8* (...) @__VERIFIER_nondet_int()
%23 = tail call i64 (...) @__VERIFIER_nondet_long()
%24 = tail call i8* (...) @__VERIFIER_nondet_int()
%25 = tail call i8* (...) @__VERIFIER_nondet_int()
%26 = tail call i8* (...) @__VERIFIER_nondet_int()
%27 = tail call i8* (...) @__VERIFIER_nondet_int()
%28 = tail call i8* (...) @__VERIFIER_nondet_int()
%29 = tail call i8* (...) @__VERIFIER_nondet_int()
%30 = tail call i64 (...) @__VERIFIER_nondet_long()
%31 = tail call i8* (...) @__VERIFIER_nondet_int()
%32 = tail call i8* (...) @__VERIFIER_nondet_int()
%33 = tail call i8* (...) @__VERIFIER_nondet_int()
%34 = icmp eq i32 %9, 0
br i1 %34, label %281, label %35
35: ; preds = %1
%36 = ptrtoint i8* %21 to i64
%37 = ptrtoint i8* %5 to i64
%38 = trunc i64 %37 to i32
%39 = ptrtoint i8* %32 to i64
%40 = trunc i64 %39 to i32
%41 = ptrtoint i8* %31 to i64
%42 = trunc i64 %41 to i32
%43 = ptrtoint i8* %29 to i64
%44 = trunc i64 %43 to i32
%45 = ptrtoint i8* %25 to i64
%46 = trunc i64 %45 to i32
%47 = ptrtoint i8* %24 to i64
%48 = trunc i64 %47 to i32
%49 = ptrtoint i8* %22 to i64
%50 = ptrtoint i8* %15 to i64
%51 = trunc i64 %50 to i32
%52 = ptrtoint i8* %14 to i64
%53 = trunc i64 %52 to i32
%54 = ptrtoint i8* %10 to i64
%55 = ptrtoint i8* %6 to i64
%56 = trunc i64 %55 to i32
%57 = icmp eq i32 %13, -1
%58 = icmp eq i32 %53, 0
%59 = icmp eq i32 %13, -4
%60 = select i1 %58, i1 true, i1 %59
%61 = and i64 %36, 4294967295
%62 = icmp ne i64 %61, 4294967040
%63 = icmp eq i32 %13, -2
%64 = select i1 %62, i1 %63, i1 false
%65 = and i64 %54, 4294967295
%66 = icmp ne i64 %65, 4292870144
%67 = icmp ne i64 %61, 4294967266
%68 = select i1 %66, i1 true, i1 %67
%69 = icmp eq i32 %51, 0
%70 = select i1 %68, i1 true, i1 %69
%71 = shl i64 %49, 32
%72 = shl nsw i32 %44, 3
%73 = icmp eq i64 %61, 4294967040
%74 = icmp eq i32 %38, 0
%75 = select i1 %74, i32 8512, i32 8656
%76 = select i1 %74, i32 3, i32 8640
%77 = icmp eq i32 %42, 0
%78 = icmp eq i32 %40, 0
%79 = select i1 %74, i32 8656, i32 3
%80 = icmp slt i64 %30, 1
%81 = icmp ne i32 %48, -12288
%82 = icmp ne i32 %46, -16384
%83 = icmp eq i32 %56, 0
br label %84
84: ; preds = %125, %35
%85 = phi i64 [ %23, %35 ], [ %126, %125 ]
%86 = phi i32 [ undef, %35 ], [ %127, %125 ]
%87 = phi i32 [ 0, %35 ], [ %128, %125 ]
%88 = phi i32 [ %0, %35 ], [ %129, %125 ]
switch i32 %88, label %89 [
i32 12292, label %281
i32 24576, label %281
i32 16384, label %281
i32 8195, label %281
i32 8192, label %281
]
89: ; preds = %84
%90 = and i32 %88, -2
%91 = icmp eq i32 %90, 8480
br i1 %91, label %104, label %92
92: ; preds = %89
switch i32 %88, label %93 [
i32 8482, label %224
i32 8466, label %109
i32 8465, label %109
i32 8464, label %109
]
93: ; preds = %92
%94 = add i32 %90, -8496
%95 = tail call i32 @llvm.fshl.i32(i32 %94, i32 %94, i32 28)
switch i32 %95, label %96 [
i32 0, label %116
i32 1, label %124
i32 2, label %135
i32 3, label %146
i32 4, label %154
]
96: ; preds = %93
%97 = icmp eq i32 %88, 8448
br i1 %97, label %159, label %98
98: ; preds = %96
%99 = add i32 %90, -8576
%100 = tail call i32 @llvm.fshl.i32(i32 %99, i32 %99, i32 28)
switch i32 %100, label %101 [
i32 0, label %162
i32 1, label %174
i32 2, label %179
i32 4, label %184
i32 5, label %193
i32 6, label %205
]
101: ; preds = %98
%102 = icmp eq i32 %88, 3
%103 = select i1 %102, i32 1, i32 -1
br label %281
104: ; preds = %89
%105 = tail call i8* (...) @__VERIFIER_nondet_int()
%106 = ptrtoint i8* %105 to i64
%107 = trunc i64 %106 to i32
%108 = icmp slt i32 %107, 1
br i1 %108, label %278, label %224
109: ; preds = %92, %92, %92
%110 = tail call i8* (...) @__VERIFIER_nondet_int()
%111 = ptrtoint i8* %110 to i64
%112 = trunc i64 %111 to i32
%113 = icmp eq i32 %87, 0
%114 = select i1 %113, i32 1, i32 %87
%115 = icmp slt i32 %112, 1
br i1 %115, label %275, label %224
116: ; preds = %93
%117 = tail call i8* (...) @__VERIFIER_nondet_int()
%118 = ptrtoint i8* %117 to i64
%119 = trunc i64 %118 to i32
%120 = icmp slt i32 %119, 1
br i1 %120, label %272, label %121
121: ; preds = %116
%122 = icmp eq i32 %87, 1
%123 = select i1 %122, i32 2, i32 %87
br label %215
124: ; preds = %93
br i1 %73, label %130, label %125
125: ; preds = %124, %136, %138, %147, %148, %146, %224, %229
%126 = phi i64 [ %228, %224 ], [ %228, %229 ], [ %85, %124 ], [ %85, %136 ], [ %85, %138 ], [ %85, %147 ], [ %85, %148 ], [ %85, %146 ]
%127 = phi i32 [ %227, %224 ], [ %227, %229 ], [ %86, %124 ], [ %86, %136 ], [ %86, %138 ], [ %86, %147 ], [ %86, %148 ], [ %86, %146 ]
%128 = phi i32 [ %226, %224 ], [ %226, %229 ], [ %87, %124 ], [ %87, %136 ], [ %87, %138 ], [ %87, %147 ], [ %87, %148 ], [ %87, %146 ]
%129 = phi i32 [ %225, %224 ], [ %225, %229 ], [ 8528, %124 ], [ 8544, %136 ], [ 8544, %138 ], [ 8560, %147 ], [ 8560, %148 ], [ 8560, %146 ]
br label %84
130: ; preds = %124
%131 = tail call i8* (...) @__VERIFIER_nondet_int()
%132 = ptrtoint i8* %131 to i64
%133 = trunc i64 %132 to i32
%134 = icmp slt i32 %133, 1
br i1 %134, label %269, label %215
135: ; preds = %93
br i1 %70, label %141, label %136
136: ; preds = %135
switch i64 %71, label %138 [
i64 -8589934592, label %125
i64 -17179869184, label %137
]
137: ; preds = %136
br label %138
138: ; preds = %136, %137
%139 = phi i32 [ 1024, %137 ], [ 512, %136 ]
%140 = icmp sgt i32 %72, %139
br i1 %140, label %141, label %125
141: ; preds = %138, %135
%142 = tail call i8* (...) @__VERIFIER_nondet_int()
%143 = ptrtoint i8* %142 to i64
%144 = trunc i64 %143 to i32
%145 = icmp slt i32 %144, 1
br i1 %145, label %266, label %215
146: ; preds = %93
br i1 %57, label %125, label %147
147: ; preds = %146
br i1 %60, label %148, label %125
148: ; preds = %147
br i1 %64, label %125, label %149
149: ; preds = %148
%150 = tail call i8* (...) @__VERIFIER_nondet_int()
%151 = ptrtoint i8* %150 to i64
%152 = trunc i64 %151 to i32
%153 = icmp slt i32 %152, 1
br i1 %153, label %263, label %215
154: ; preds = %93
%155 = tail call i8* (...) @__VERIFIER_nondet_int()
%156 = ptrtoint i8* %155 to i64
%157 = trunc i64 %156 to i32
%158 = icmp slt i32 %157, 1
br i1 %158, label %260, label %215
159: ; preds = %96
%160 = icmp sgt i64 %85, 0
br i1 %160, label %161, label %224
161: ; preds = %159
br i1 %80, label %281, label %224
162: ; preds = %98
%163 = tail call i8* (...) @__VERIFIER_nondet_int()
%164 = ptrtoint i8* %163 to i64
%165 = trunc i64 %164 to i32
%166 = icmp slt i32 %165, 1
br i1 %166, label %257, label %167
167: ; preds = %162
%168 = icmp eq i32 %165, 2
br i1 %168, label %215, label %169
169: ; preds = %167
%170 = tail call i8* (...) @__VERIFIER_nondet_int()
%171 = ptrtoint i8* %170 to i64
%172 = trunc i64 %171 to i32
%173 = icmp slt i32 %172, 1
br i1 %173, label %254, label %215
174: ; preds = %98
%175 = tail call i8* (...) @__VERIFIER_nondet_int()
%176 = ptrtoint i8* %175 to i64
%177 = trunc i64 %176 to i32
%178 = icmp slt i32 %177, 1
br i1 %178, label %251, label %215
179: ; preds = %98
%180 = tail call i8* (...) @__VERIFIER_nondet_int()
%181 = ptrtoint i8* %180 to i64
%182 = trunc i64 %181 to i32
%183 = icmp slt i32 %182, 1
br i1 %183, label %248, label %215
184: ; preds = %98
%185 = tail call i8* (...) @__VERIFIER_nondet_int()
%186 = ptrtoint i8* %185 to i64
%187 = trunc i64 %186 to i32
switch i32 %87, label %189 [
i32 4, label %190
i32 7, label %188
i32 10, label %234
]
188: ; preds = %184
br label %190
189: ; preds = %184
br label %190
190: ; preds = %184, %189, %188
%191 = phi i32 [ 8, %188 ], [ 5, %184 ], [ %87, %189 ]
%192 = icmp slt i32 %187, 1
br i1 %192, label %245, label %215
193: ; preds = %98
br i1 %77, label %281, label %194
194: ; preds = %193
%195 = tail call i8* (...) @__VERIFIER_nondet_int()
%196 = ptrtoint i8* %195 to i64
%197 = trunc i64 %196 to i32
switch i32 %87, label %200 [
i32 2, label %201
i32 5, label %198
i32 8, label %199
]
198: ; preds = %194
br label %201
199: ; preds = %194
br label %201
200: ; preds = %194
br label %201
201: ; preds = %194, %200, %198, %199
%202 = phi i32 [ 6, %198 ], [ 9, %199 ], [ 3, %194 ], [ %87, %200 ]
%203 = icmp slt i32 %197, 1
br i1 %203, label %242, label %204
204: ; preds = %201
br i1 %78, label %281, label %215
205: ; preds = %98
%206 = tail call i8* (...) @__VERIFIER_nondet_int()
%207 = ptrtoint i8* %206 to i64
%208 = trunc i64 %207 to i32
switch i32 %87, label %211 [
i32 3, label %212
i32 6, label %209
i32 9, label %210
]
209: ; preds = %205
br label %212
210: ; preds = %205
br label %212
211: ; preds = %205
br label %212
212: ; preds = %205, %211, %209, %210
%213 = phi i32 [ 7, %209 ], [ 10, %210 ], [ 4, %205 ], [ %87, %211 ]
%214 = icmp slt i32 %208, 1
br i1 %214, label %239, label %215
215: ; preds = %212, %190, %121, %204, %130, %141, %149, %154, %167, %169, %174, %179
%216 = phi i32 [ %86, %179 ], [ %86, %174 ], [ %86, %169 ], [ %86, %167 ], [ 8576, %154 ], [ 8576, %149 ], [ %86, %141 ], [ %86, %130 ], [ %86, %204 ], [ %86, %121 ], [ %86, %190 ], [ %76, %212 ]
%217 = phi i32 [ %87, %179 ], [ %87, %174 ], [ %87, %169 ], [ %87, %167 ], [ %87, %154 ], [ %87, %149 ], [ %87, %141 ], [ %87, %130 ], [ %202, %204 ], [ %123, %121 ], [ %191, %190 ], [ %213, %212 ]
%218 = phi i32 [ 8640, %179 ], [ 8608, %174 ], [ 8592, %169 ], [ 8466, %167 ], [ 8448, %154 ], [ 8448, %149 ], [ 8544, %141 ], [ 8528, %130 ], [ 8672, %204 ], [ %75, %121 ], [ %79, %190 ], [ 8448, %212 ]
%219 = icmp ne i32 %218, 8656
%220 = select i1 %81, i1 %219, i1 false
%221 = select i1 %220, i1 %82, i1 false
%222 = icmp eq i32 %88, 8496
%223 = select i1 %221, i1 %222, i1 false
br i1 %223, label %234, label %224
224: ; preds = %159, %161, %109, %92, %104, %215
%225 = phi i32 [ %218, %215 ], [ 8448, %104 ], [ 3, %92 ], [ 8496, %109 ], [ %86, %161 ], [ %86, %159 ]
%226 = phi i32 [ %217, %215 ], [ %87, %104 ], [ %87, %92 ], [ %114, %109 ], [ %87, %161 ], [ %87, %159 ]
%227 = phi i32 [ %216, %215 ], [ 8482, %104 ], [ %86, %92 ], [ %86, %109 ], [ %86, %161 ], [ %86, %159 ]
%228 = phi i64 [ %85, %215 ], [ %85, %104 ], [ %85, %92 ], [ %85, %109 ], [ %30, %161 ], [ %85, %159 ]
br i1 %83, label %125, label %229
229: ; preds = %224
%230 = tail call i8* (...) @__VERIFIER_nondet_int()
%231 = ptrtoint i8* %230 to i64
%232 = trunc i64 %231 to i32
%233 = icmp slt i32 %232, 1
br i1 %233, label %236, label %125
234: ; preds = %184, %215
%235 = tail call i32 (...) @__VERIFIER_error()
br label %281
236: ; preds = %229
%237 = ptrtoint i8* %230 to i64
%238 = trunc i64 %237 to i32
br label %281
239: ; preds = %212
%240 = ptrtoint i8* %206 to i64
%241 = trunc i64 %240 to i32
br label %281
242: ; preds = %201
%243 = ptrtoint i8* %195 to i64
%244 = trunc i64 %243 to i32
br label %281
245: ; preds = %190
%246 = ptrtoint i8* %185 to i64
%247 = trunc i64 %246 to i32
br label %281
248: ; preds = %179
%249 = ptrtoint i8* %180 to i64
%250 = trunc i64 %249 to i32
br label %281
251: ; preds = %174
%252 = ptrtoint i8* %175 to i64
%253 = trunc i64 %252 to i32
br label %281
254: ; preds = %169
%255 = ptrtoint i8* %170 to i64
%256 = trunc i64 %255 to i32
br label %281
257: ; preds = %162
%258 = ptrtoint i8* %163 to i64
%259 = trunc i64 %258 to i32
br label %281
260: ; preds = %154
%261 = ptrtoint i8* %155 to i64
%262 = trunc i64 %261 to i32
br label %281
263: ; preds = %149
%264 = ptrtoint i8* %150 to i64
%265 = trunc i64 %264 to i32
br label %281
266: ; preds = %141
%267 = ptrtoint i8* %142 to i64
%268 = trunc i64 %267 to i32
br label %281
269: ; preds = %130
%270 = ptrtoint i8* %131 to i64
%271 = trunc i64 %270 to i32
br label %281
272: ; preds = %116
%273 = ptrtoint i8* %117 to i64
%274 = trunc i64 %273 to i32
br label %281
275: ; preds = %109
%276 = ptrtoint i8* %110 to i64
%277 = trunc i64 %276 to i32
br label %281
278: ; preds = %104
%279 = ptrtoint i8* %105 to i64
%280 = trunc i64 %279 to i32
br label %281
281: ; preds = %84, %84, %84, %84, %84, %161, %193, %204, %236, %239, %242, %245, %248, %251, %254, %257, %260, %263, %266, %269, %272, %275, %278, %101, %1, %234
%282 = phi i32 [ -1, %234 ], [ -1, %1 ], [ %103, %101 ], [ %238, %236 ], [ %241, %239 ], [ %244, %242 ], [ %247, %245 ], [ %250, %248 ], [ %253, %251 ], [ %256, %254 ], [ %259, %257 ], [ %262, %260 ], [ %265, %263 ], [ %268, %266 ], [ %271, %269 ], [ %274, %272 ], [ %277, %275 ], [ %280, %278 ], [ -1, %204 ], [ -1, %193 ], [ -1, %161 ], [ -1, %84 ], [ -1, %84 ], [ -1, %84 ], [ -1, %84 ], [ -1, %84 ]
ret i32 %282
}