#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ ILibXmlEscape(char *, char const *);
scalar_t__ ILibXmlEscapeLength(char const *);
int /*<<< orphan*/ UpnpResponseGeneric(void const *, char *, char *, char *);
int /*<<< orphan*/ free(char *);
scalar_t__ malloc(scalar_t__);
int /*<<< orphan*/ sprintf(char *, char *, unsigned int const, char *, char *,
                           char *, char *, char *, char *, char *, char *);
scalar_t__ strlen(char *);
void UpnpResponse_MediaRenderer_AVTransport_GetMediaInfo(
    const void *UPnPToken, const unsigned int NrTracks,
    const char *unescaped_MediaDuration, const char *unescaped_CurrentURI,
    const char *unescaped_CurrentURIMetaData, const char *unescaped_NextURI,
    const char *unescaped_NextURIMetaData, const char *unescaped_PlayMedium,
    const char *unescaped_RecordMedium, const char *unescaped_WriteStatus) {
  char *body;
  char *MediaDuration =
      (char *)malloc(1 + ILibXmlEscapeLength(unescaped_MediaDuration));
  char *CurrentURI =
      (char *)malloc(1 + ILibXmlEscapeLength(unescaped_CurrentURI));
  char *CurrentURIMetaData =
      (char *)malloc(1 + ILibXmlEscapeLength(unescaped_CurrentURIMetaData));
  char *NextURI = (char *)malloc(1 + ILibXmlEscapeLength(unescaped_NextURI));
  char *NextURIMetaData =
      (char *)malloc(1 + ILibXmlEscapeLength(unescaped_NextURIMetaData));
  char *PlayMedium =
      (char *)malloc(1 + ILibXmlEscapeLength(unescaped_PlayMedium));
  char *RecordMedium =
      (char *)malloc(1 + ILibXmlEscapeLength(unescaped_RecordMedium));
  char *WriteStatus =
      (char *)malloc(1 + ILibXmlEscapeLength(unescaped_WriteStatus));
  ILibXmlEscape(MediaDuration, unescaped_MediaDuration);
  ILibXmlEscape(CurrentURI, unescaped_CurrentURI);
  ILibXmlEscape(CurrentURIMetaData, unescaped_CurrentURIMetaData);
  ILibXmlEscape(NextURI, unescaped_NextURI);
  ILibXmlEscape(NextURIMetaData, unescaped_NextURIMetaData);
  ILibXmlEscape(PlayMedium, unescaped_PlayMedium);
  ILibXmlEscape(RecordMedium, unescaped_RecordMedium);
  ILibXmlEscape(WriteStatus, unescaped_WriteStatus);
  body = (char *)malloc(265 + strlen(MediaDuration) + strlen(CurrentURI) +
                        strlen(CurrentURIMetaData) + strlen(NextURI) +
                        strlen(NextURIMetaData) + strlen(PlayMedium) +
                        strlen(RecordMedium) + strlen(WriteStatus));
  sprintf(
      body,
      "<NrTracks>%u</NrTracks><MediaDuration>%s</MediaDuration><CurrentURI>%s</"
      "CurrentURI><CurrentURIMetaData>%s</CurrentURIMetaData><NextURI>%s</"
      "NextURI><NextURIMetaData>%s</NextURIMetaData><PlayMedium>%s</"
      "PlayMedium><RecordMedium>%s</RecordMedium><WriteStatus>%s</WriteStatus>",
      NrTracks, MediaDuration, CurrentURI, CurrentURIMetaData, NextURI,
      NextURIMetaData, PlayMedium, RecordMedium, WriteStatus);
  UpnpResponseGeneric(UPnPToken, "urn:schemas-upnp-org:service:AVTransport:1",
                      "GetMediaInfo", body);
  free(body);
  free(MediaDuration);
  free(CurrentURI);
  free(CurrentURIMetaData);
  free(NextURI);
  free(NextURIMetaData);
  free(PlayMedium);
  free(RecordMedium);
  free(WriteStatus);
}


x86 assembly (clang, -O0):
<UpnpResponse_MediaRenderer_AVTransport_GetMediaInfo>:
push   %rbp
mov    %rsp,%rbp
push   %r14
push   %rbx
sub    $0xe0,%rsp
mov    0x28(%rbp),%rax
mov    0x20(%rbp),%rax
mov    0x18(%rbp),%rax
mov    0x10(%rbp),%rax
mov    %rdi,-0x18(%rbp)
mov    %esi,-0x1c(%rbp)
mov    %rdx,-0x28(%rbp)
mov    %rcx,-0x30(%rbp)
mov    %r8,-0x38(%rbp)
mov    %r9,-0x40(%rbp)
mov    -0x28(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x50(%rbp)
mov    -0x30(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x58(%rbp)
mov    -0x38(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x60(%rbp)
mov    -0x40(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x68(%rbp)
mov    0x10(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x70(%rbp)
mov    0x18(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x78(%rbp)
mov    0x20(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x80(%rbp)
mov    0x28(%rbp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
mov    %rax,%rdi
add    $0x1,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x88(%rbp)
mov    -0x50(%rbp),%rdi
mov    -0x28(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x58(%rbp),%rdi
mov    -0x30(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x60(%rbp),%rdi
mov    -0x38(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x68(%rbp),%rdi
mov    -0x40(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x70(%rbp),%rdi
mov    0x10(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x78(%rbp),%rdi
mov    0x18(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x80(%rbp),%rdi
mov    0x20(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x88(%rbp),%rdi
mov    0x28(%rbp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    -0x50(%rbp),%rdi
call   1060 <strlen@plt>
add    $0x109,%rax
mov    %rax,-0xc0(%rbp)
mov    -0x58(%rbp),%rdi
call   1060 <strlen@plt>
mov    %rax,%rcx
mov    -0xc0(%rbp),%rax
add    %rcx,%rax
mov    %rax,-0xb8(%rbp)
mov    -0x60(%rbp),%rdi
call   1060 <strlen@plt>
mov    %rax,%rcx
mov    -0xb8(%rbp),%rax
add    %rcx,%rax
mov    %rax,-0xb0(%rbp)
mov    -0x68(%rbp),%rdi
call   1060 <strlen@plt>
mov    %rax,%rcx
mov    -0xb0(%rbp),%rax
add    %rcx,%rax
mov    %rax,-0xa8(%rbp)
mov    -0x70(%rbp),%rdi
call   1060 <strlen@plt>
mov    %rax,%rcx
mov    -0xa8(%rbp),%rax
add    %rcx,%rax
mov    %rax,-0xa0(%rbp)
mov    -0x78(%rbp),%rdi
call   1060 <strlen@plt>
mov    %rax,%rcx
mov    -0xa0(%rbp),%rax
add    %rcx,%rax
mov    %rax,-0x98(%rbp)
mov    -0x80(%rbp),%rdi
call   1060 <strlen@plt>
mov    %rax,%rcx
mov    -0x98(%rbp),%rax
add    %rcx,%rax
mov    %rax,-0x90(%rbp)
mov    -0x88(%rbp),%rdi
call   1060 <strlen@plt>
mov    -0x90(%rbp),%rdi
add    %rax,%rdi
call   1070 <malloc@plt>
mov    %rax,-0x48(%rbp)
mov    -0x48(%rbp),%rdi
mov    -0x1c(%rbp),%edx
mov    -0x50(%rbp),%rcx
mov    -0x58(%rbp),%r8
mov    -0x60(%rbp),%r9
mov    -0x68(%rbp),%r14
mov    -0x70(%rbp),%rbx
mov    -0x78(%rbp),%r11
mov    -0x80(%rbp),%r10
mov    -0x88(%rbp),%rax
lea    0xc11(%rip),%rsi
mov    %r14,(%rsp)
mov    %rbx,0x8(%rsp)
mov    %r11,0x10(%rsp)
mov    %r10,0x18(%rsp)
mov    %rax,0x20(%rsp)
call   1080 <sprintf@plt>
mov    -0x18(%rbp),%rdi
mov    -0x48(%rbp),%rcx
lea    0xcf5(%rip),%rsi
lea    0xd19(%rip),%rdx
call   1050 <UpnpResponseGeneric@plt>
mov    -0x48(%rbp),%rdi
call   1030 <free@plt>
mov    -0x50(%rbp),%rdi
call   1030 <free@plt>
mov    -0x58(%rbp),%rdi
call   1030 <free@plt>
mov    -0x60(%rbp),%rdi
call   1030 <free@plt>
mov    -0x68(%rbp),%rdi
call   1030 <free@plt>
mov    -0x70(%rbp),%rdi
call   1030 <free@plt>
mov    -0x78(%rbp),%rdi
call   1030 <free@plt>
mov    -0x80(%rbp),%rdi
call   1030 <free@plt>
mov    -0x88(%rbp),%rdi
call   1030 <free@plt>
add    $0xe0,%rsp
pop    %rbx
pop    %r14
pop    %rbp
ret

x86 assembly (clang, -O2):
<UpnpResponse_MediaRenderer_AVTransport_GetMediaInfo>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0x88,%rsp
mov    %r9,%rbp
mov    %r9,0x68(%rsp)
mov    %r8,%rbx
mov    %r8,0x70(%rsp)
mov    %rcx,%r13
mov    %rdx,0x78(%rsp)
mov    %esi,0x24(%rsp)
mov    %rdi,0x80(%rsp)
mov    0xd8(%rsp),%rax
mov    %rax,0x40(%rsp)
mov    0xd0(%rsp),%r15
mov    %r15,0x48(%rsp)
mov    0xc8(%rsp),%r14
mov    %r14,0x50(%rsp)
mov    0xc0(%rsp),%r12
mov    %r12,0x60(%rsp)
mov    %rdx,%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,0x30(%rsp)
mov    %r13,%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,0x8(%rsp)
mov    %rbx,%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,0x10(%rsp)
mov    %rbp,%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,0x58(%rsp)
mov    %r12,%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,0x18(%rsp)
mov    %r14,%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,0x38(%rsp)
mov    %r15,%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,%r14
mov    %rax,0x28(%rsp)
mov    0x40(%rsp),%rdi
call   1090 <ILibXmlEscapeLength@plt>
lea    0x1(%rax),%rdi
call   1070 <malloc@plt>
mov    %rax,%rbx
mov    0x30(%rsp),%r15
mov    %r15,%rdi
mov    0x78(%rsp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    0x8(%rsp),%rbp
mov    %rbp,%rdi
mov    %r13,%rsi
call   1040 <ILibXmlEscape@plt>
mov    0x10(%rsp),%r12
mov    %r12,%rdi
mov    0x70(%rsp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    0x58(%rsp),%r13
mov    %r13,%rdi
mov    0x68(%rsp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    0x18(%rsp),%rdi
mov    0x60(%rsp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    0x38(%rsp),%rdi
mov    0x50(%rsp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    %r14,%rdi
mov    0x48(%rsp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    %rbx,%rdi
mov    %rbx,%r14
mov    0x40(%rsp),%rsi
call   1040 <ILibXmlEscape@plt>
mov    %r15,%rdi
call   1060 <strlen@plt>
mov    %rax,%rbx
mov    %rbp,%rdi
call   1060 <strlen@plt>
mov    %rax,%rbp
add    %rbx,%rbp
mov    %r12,%rdi
call   1060 <strlen@plt>
mov    %rax,%rbx
add    %rbp,%rbx
mov    %r13,%r15
mov    %r13,%rdi
call   1060 <strlen@plt>
mov    %rax,%rbp
add    %rbx,%rbp
mov    0x18(%rsp),%rdi
call   1060 <strlen@plt>
mov    %rax,%rbx
add    %rbp,%rbx
mov    0x38(%rsp),%r12
mov    %r12,%rdi
call   1060 <strlen@plt>
mov    %rax,%rbp
add    %rbx,%rbp
mov    0x28(%rsp),%r13
mov    %r13,%rdi
call   1060 <strlen@plt>
mov    %rax,%rbx
add    %rbp,%rbx
mov    %r14,%rdi
call   1060 <strlen@plt>
lea    (%rax,%rbx,1),%rdi
add    $0x109,%rdi
call   1070 <malloc@plt>
mov    %rax,%rbx
sub    $0x8,%rsp
lea    0xc5f(%rip),%rsi
mov    %rax,%rdi
mov    0x2c(%rsp),%edx
mov    0x38(%rsp),%rbp
mov    %rbp,%rcx
mov    0x10(%rsp),%r8
mov    0x18(%rsp),%r9
push   %r14
push   %r13
push   %r12
mov    0x38(%rsp),%r13
push   %r13
push   %r15
call   1080 <sprintf@plt>
add    $0x30,%rsp
lea    0xd37(%rip),%rsi
lea    0xd5b(%rip),%rdx
mov    0x80(%rsp),%rdi
mov    %rbx,%rcx
call   1050 <UpnpResponseGeneric@plt>
mov    %rbx,%rdi
call   1030 <free@plt>
mov    %rbp,%rdi
call   1030 <free@plt>
mov    0x8(%rsp),%rdi
call   1030 <free@plt>
mov    0x10(%rsp),%rdi
call   1030 <free@plt>
mov    %r15,%rdi
call   1030 <free@plt>
mov    %r13,%rdi
call   1030 <free@plt>
mov    %r12,%rdi
call   1030 <free@plt>
mov    0x28(%rsp),%rdi
call   1030 <free@plt>
mov    %r14,%rdi
add    $0x88,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
jmp    1030 <free@plt>

LLVM IR (-O0):
@.str = [272 x i8] c"<NrTracks>%u</NrTracks><MediaDuration>%s</MediaDuration><CurrentURI>%s</CurrentURI><CurrentURIMetaData>%s</CurrentURIMetaData><NextURI>%s</NextURI><NextURIMetaData>%s</NextURIMetaData><PlayMedium>%s</PlayMedium><RecordMedium>%s</RecordMedium><WriteStatus>%s</WriteStatus>\00"
@.str.1 = [43 x i8] c"urn:schemas-upnp-org:service:AVTransport:1\00"
@.str.2 = [13 x i8] c"GetMediaInfo\00"
define void @UpnpResponse_MediaRenderer_AVTransport_GetMediaInfo(i8* %0, i32 %1, i8* %2, i8* %3, i8* %4, i8* %5, i8* %6, i8* %7, i8* %8, i8* %9) {
%11 = alloca i8*
%12 = alloca i32
%13 = alloca i8*
%14 = alloca i8*
%15 = alloca i8*
%16 = alloca i8*
%17 = alloca i8*
%18 = alloca i8*
%19 = alloca i8*
%20 = alloca i8*
%21 = alloca i8*
%22 = alloca i8*
%23 = alloca i8*
%24 = alloca i8*
%25 = alloca i8*
%26 = alloca i8*
%27 = alloca i8*
%28 = alloca i8*
%29 = alloca i8*
store i8* %0, i8** %11
store i32 %1, i32* %12
store i8* %2, i8** %13
store i8* %3, i8** %14
store i8* %4, i8** %15
store i8* %5, i8** %16
store i8* %6, i8** %17
store i8* %7, i8** %18
store i8* %8, i8** %19
store i8* %9, i8** %20
%30 = load i8*, i8** %13
%31 = call i64 @ILibXmlEscapeLength(i8* %30)
%32 = add nsw i64 1, %31
%33 = call i64 @malloc(i64 %32)
%34 = inttoptr i64 %33 to i8*
store i8* %34, i8** %22
%35 = load i8*, i8** %14
%36 = call i64 @ILibXmlEscapeLength(i8* %35)
%37 = add nsw i64 1, %36
%38 = call i64 @malloc(i64 %37)
%39 = inttoptr i64 %38 to i8*
store i8* %39, i8** %23
%40 = load i8*, i8** %15
%41 = call i64 @ILibXmlEscapeLength(i8* %40)
%42 = add nsw i64 1, %41
%43 = call i64 @malloc(i64 %42)
%44 = inttoptr i64 %43 to i8*
store i8* %44, i8** %24
%45 = load i8*, i8** %16
%46 = call i64 @ILibXmlEscapeLength(i8* %45)
%47 = add nsw i64 1, %46
%48 = call i64 @malloc(i64 %47)
%49 = inttoptr i64 %48 to i8*
store i8* %49, i8** %25
%50 = load i8*, i8** %17
%51 = call i64 @ILibXmlEscapeLength(i8* %50)
%52 = add nsw i64 1, %51
%53 = call i64 @malloc(i64 %52)
%54 = inttoptr i64 %53 to i8*
store i8* %54, i8** %26
%55 = load i8*, i8** %18
%56 = call i64 @ILibXmlEscapeLength(i8* %55)
%57 = add nsw i64 1, %56
%58 = call i64 @malloc(i64 %57)
%59 = inttoptr i64 %58 to i8*
store i8* %59, i8** %27
%60 = load i8*, i8** %19
%61 = call i64 @ILibXmlEscapeLength(i8* %60)
%62 = add nsw i64 1, %61
%63 = call i64 @malloc(i64 %62)
%64 = inttoptr i64 %63 to i8*
store i8* %64, i8** %28
%65 = load i8*, i8** %20
%66 = call i64 @ILibXmlEscapeLength(i8* %65)
%67 = add nsw i64 1, %66
%68 = call i64 @malloc(i64 %67)
%69 = inttoptr i64 %68 to i8*
store i8* %69, i8** %29
%70 = load i8*, i8** %22
%71 = load i8*, i8** %13
%72 = call i32 @ILibXmlEscape(i8* %70, i8* %71)
%73 = load i8*, i8** %23
%74 = load i8*, i8** %14
%75 = call i32 @ILibXmlEscape(i8* %73, i8* %74)
%76 = load i8*, i8** %24
%77 = load i8*, i8** %15
%78 = call i32 @ILibXmlEscape(i8* %76, i8* %77)
%79 = load i8*, i8** %25
%80 = load i8*, i8** %16
%81 = call i32 @ILibXmlEscape(i8* %79, i8* %80)
%82 = load i8*, i8** %26
%83 = load i8*, i8** %17
%84 = call i32 @ILibXmlEscape(i8* %82, i8* %83)
%85 = load i8*, i8** %27
%86 = load i8*, i8** %18
%87 = call i32 @ILibXmlEscape(i8* %85, i8* %86)
%88 = load i8*, i8** %28
%89 = load i8*, i8** %19
%90 = call i32 @ILibXmlEscape(i8* %88, i8* %89)
%91 = load i8*, i8** %29
%92 = load i8*, i8** %20
%93 = call i32 @ILibXmlEscape(i8* %91, i8* %92)
%94 = load i8*, i8** %22
%95 = call i64 @strlen(i8* %94)
%96 = add nsw i64 265, %95
%97 = load i8*, i8** %23
%98 = call i64 @strlen(i8* %97)
%99 = add nsw i64 %96, %98
%100 = load i8*, i8** %24
%101 = call i64 @strlen(i8* %100)
%102 = add nsw i64 %99, %101
%103 = load i8*, i8** %25
%104 = call i64 @strlen(i8* %103)
%105 = add nsw i64 %102, %104
%106 = load i8*, i8** %26
%107 = call i64 @strlen(i8* %106)
%108 = add nsw i64 %105, %107
%109 = load i8*, i8** %27
%110 = call i64 @strlen(i8* %109)
%111 = add nsw i64 %108, %110
%112 = load i8*, i8** %28
%113 = call i64 @strlen(i8* %112)
%114 = add nsw i64 %111, %113
%115 = load i8*, i8** %29
%116 = call i64 @strlen(i8* %115)
%117 = add nsw i64 %114, %116
%118 = call i64 @malloc(i64 %117)
%119 = inttoptr i64 %118 to i8*
store i8* %119, i8** %21
%120 = load i8*, i8** %21
%121 = load i32, i32* %12
%122 = load i8*, i8** %22
%123 = load i8*, i8** %23
%124 = load i8*, i8** %24
%125 = load i8*, i8** %25
%126 = load i8*, i8** %26
%127 = load i8*, i8** %27
%128 = load i8*, i8** %28
%129 = load i8*, i8** %29
%130 = call i32 @sprintf(i8* %120, i8* getelementptr inbounds ([272 x i8], [272 x i8]* @.str, i64 0, i64 0), i32 %121, i8* %122, i8* %123, i8* %124, i8* %125, i8* %126, i8* %127, i8* %128, i8* %129)
%131 = load i8*, i8** %11
%132 = load i8*, i8** %21
%133 = call i32 @UpnpResponseGeneric(i8* %131, i8* getelementptr inbounds ([43 x i8], [43 x i8]* @.str.1, i64 0, i64 0), i8* getelementptr inbounds ([13 x i8], [13 x i8]* @.str.2, i64 0, i64 0), i8* %132)
%134 = load i8*, i8** %21
%135 = call i32 @free(i8* %134)
%136 = load i8*, i8** %22
%137 = call i32 @free(i8* %136)
%138 = load i8*, i8** %23
%139 = call i32 @free(i8* %138)
%140 = load i8*, i8** %24
%141 = call i32 @free(i8* %140)
%142 = load i8*, i8** %25
%143 = call i32 @free(i8* %142)
%144 = load i8*, i8** %26
%145 = call i32 @free(i8* %144)
%146 = load i8*, i8** %27
%147 = call i32 @free(i8* %146)
%148 = load i8*, i8** %28
%149 = call i32 @free(i8* %148)
%150 = load i8*, i8** %29
%151 = call i32 @free(i8* %150)
ret void
}

LLVM IR (-O2):
@.str = [272 x i8] c"<NrTracks>%u</NrTracks><MediaDuration>%s</MediaDuration><CurrentURI>%s</CurrentURI><CurrentURIMetaData>%s</CurrentURIMetaData><NextURI>%s</NextURI><NextURIMetaData>%s</NextURIMetaData><PlayMedium>%s</PlayMedium><RecordMedium>%s</RecordMedium><WriteStatus>%s</WriteStatus>\00"
@.str.1 = [43 x i8] c"urn:schemas-upnp-org:service:AVTransport:1\00"
@.str.2 = [13 x i8] c"GetMediaInfo\00"
define void @UpnpResponse_MediaRenderer_AVTransport_GetMediaInfo(i8* %0, i32 %1, i8* %2, i8* %3, i8* %4, i8* %5, i8* %6, i8* %7, i8* %8, i8* %9) {
%11 = tail call i64 @ILibXmlEscapeLength(i8* %2)
%12 = add nsw i64 %11, 1
%13 = tail call i64 @malloc(i64 %12)
%14 = inttoptr i64 %13 to i8*
%15 = tail call i64 @ILibXmlEscapeLength(i8* %3)
%16 = add nsw i64 %15, 1
%17 = tail call i64 @malloc(i64 %16)
%18 = inttoptr i64 %17 to i8*
%19 = tail call i64 @ILibXmlEscapeLength(i8* %4)
%20 = add nsw i64 %19, 1
%21 = tail call i64 @malloc(i64 %20)
%22 = inttoptr i64 %21 to i8*
%23 = tail call i64 @ILibXmlEscapeLength(i8* %5)
%24 = add nsw i64 %23, 1
%25 = tail call i64 @malloc(i64 %24)
%26 = inttoptr i64 %25 to i8*
%27 = tail call i64 @ILibXmlEscapeLength(i8* %6)
%28 = add nsw i64 %27, 1
%29 = tail call i64 @malloc(i64 %28)
%30 = inttoptr i64 %29 to i8*
%31 = tail call i64 @ILibXmlEscapeLength(i8* %7)
%32 = add nsw i64 %31, 1
%33 = tail call i64 @malloc(i64 %32)
%34 = inttoptr i64 %33 to i8*
%35 = tail call i64 @ILibXmlEscapeLength(i8* %8)
%36 = add nsw i64 %35, 1
%37 = tail call i64 @malloc(i64 %36)
%38 = inttoptr i64 %37 to i8*
%39 = tail call i64 @ILibXmlEscapeLength(i8* %9)
%40 = add nsw i64 %39, 1
%41 = tail call i64 @malloc(i64 %40)
%42 = inttoptr i64 %41 to i8*
%43 = tail call i32 @ILibXmlEscape(i8* %14, i8* %2)
%44 = tail call i32 @ILibXmlEscape(i8* %18, i8* %3)
%45 = tail call i32 @ILibXmlEscape(i8* %22, i8* %4)
%46 = tail call i32 @ILibXmlEscape(i8* %26, i8* %5)
%47 = tail call i32 @ILibXmlEscape(i8* %30, i8* %6)
%48 = tail call i32 @ILibXmlEscape(i8* %34, i8* %7)
%49 = tail call i32 @ILibXmlEscape(i8* %38, i8* %8)
%50 = tail call i32 @ILibXmlEscape(i8* %42, i8* %9)
%51 = tail call i64 @strlen(i8* dereferenceable(1) %14)
%52 = add nsw i64 %51, 265
%53 = tail call i64 @strlen(i8* dereferenceable(1) %18)
%54 = add nsw i64 %52, %53
%55 = tail call i64 @strlen(i8* dereferenceable(1) %22)
%56 = add nsw i64 %54, %55
%57 = tail call i64 @strlen(i8* dereferenceable(1) %26)
%58 = add nsw i64 %56, %57
%59 = tail call i64 @strlen(i8* dereferenceable(1) %30)
%60 = add nsw i64 %58, %59
%61 = tail call i64 @strlen(i8* dereferenceable(1) %34)
%62 = add nsw i64 %60, %61
%63 = tail call i64 @strlen(i8* dereferenceable(1) %38)
%64 = add nsw i64 %62, %63
%65 = tail call i64 @strlen(i8* dereferenceable(1) %42)
%66 = add nsw i64 %64, %65
%67 = tail call i64 @malloc(i64 %66)
%68 = inttoptr i64 %67 to i8*
%69 = tail call i32 @sprintf(i8* dereferenceable(1) %68, i8* dereferenceable(1) getelementptr inbounds ([272 x i8], [272 x i8]* @.str, i64 0, i64 0), i32 %1, i8* %14, i8* %18, i8* %22, i8* %26, i8* %30, i8* %34, i8* %38, i8* %42)
%70 = tail call i32 @UpnpResponseGeneric(i8* %0, i8* getelementptr inbounds ([43 x i8], [43 x i8]* @.str.1, i64 0, i64 0), i8* getelementptr inbounds ([13 x i8], [13 x i8]* @.str.2, i64 0, i64 0), i8* %68)
%71 = tail call i32 @free(i8* %68)
%72 = tail call i32 @free(i8* %14)
%73 = tail call i32 @free(i8* %18)
%74 = tail call i32 @free(i8* %22)
%75 = tail call i32 @free(i8* %26)
%76 = tail call i32 @free(i8* %30)
%77 = tail call i32 @free(i8* %34)
%78 = tail call i32 @free(i8* %38)
%79 = tail call i32 @free(i8* %42)
ret void
}