#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ __VERIFIER_assert(int);
int /*<<< orphan*/ __VERIFIER_assume(int);
unsigned int __VERIFIER_nondet_uint();
int main(void) {
  unsigned int x = 1;
  unsigned int y = __VERIFIER_nondet_uint();
  __VERIFIER_assume(y > 0);
  while (x < y) {
    if (x < y / x) {
      x *= x;
    } else {
      x++;
    }
  }
  __VERIFIER_assert(x == y);
}


x86 assembly (clang, -O0):
<main>:
push   %rbp
mov    %rsp,%rbp
sub    $0x10,%rsp
movl   $0x0,-0x4(%rbp)
movl   $0x1,-0x8(%rbp)
mov    $0x0,%al
call   1050 <__VERIFIER_nondet_uint@plt>
mov    %eax,-0xc(%rbp)
cmpl   $0x0,-0xc(%rbp)
seta   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assume@plt>
mov    -0x8(%rbp),%eax
cmp    -0xc(%rbp),%eax
jae    11a5 <main+0x75>
mov    -0x8(%rbp),%eax
mov    %eax,-0x10(%rbp)
mov    -0xc(%rbp),%eax
xor    %edx,%edx
divl   -0x8(%rbp)
mov    %eax,%ecx
mov    -0x10(%rbp),%eax
cmp    %ecx,%eax
jae    1197 <main+0x67>
mov    -0x8(%rbp),%eax
imul   -0x8(%rbp),%eax
mov    %eax,-0x8(%rbp)
jmp    11a0 <main+0x70>
mov    -0x8(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x8(%rbp)
jmp    1161 <main+0x31>
mov    -0x8(%rbp),%eax
cmp    -0xc(%rbp),%eax
sete   %al
and    $0x1,%al
movzbl %al,%edi
call   1030 <__VERIFIER_assert@plt>
mov    -0x4(%rbp),%eax
add    $0x10,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<main>:
push   %rbx
xor    %eax,%eax
call   1050 <__VERIFIER_nondet_uint@plt>
mov    %eax,%ebx
xor    %edi,%edi
test   %eax,%eax
setne  %dil
call   1040 <__VERIFIER_assume@plt>
cmp    $0x2,%ebx
jb     1152 <main+0x22>
nopl   0x0(%rax)
jmp    1150 <main+0x20>
xor    %edi,%edi
cmp    $0x1,%ebx
sete   %dil
call   1030 <__VERIFIER_assert@plt>
xor    %eax,%eax
pop    %rbx
ret

LLVM IR (-O0):
define i32 @main() {
%1 = alloca i32
%2 = alloca i32
%3 = alloca i32
store i32 0, i32* %1
store i32 1, i32* %2
%4 = call i32 (...) @__VERIFIER_nondet_uint()
store i32 %4, i32* %3
%5 = load i32, i32* %3
%6 = icmp ugt i32 %5, 0
%7 = zext i1 %6 to i32
%8 = call i32 @__VERIFIER_assume(i32 %7)
br label %9
9: ; preds = %26, %0
%10 = load i32, i32* %2
%11 = load i32, i32* %3
%12 = icmp ult i32 %10, %11
br i1 %12, label %13, label %27
13: ; preds = %9
%14 = load i32, i32* %2
%15 = load i32, i32* %3
%16 = load i32, i32* %2
%17 = udiv i32 %15, %16
%18 = icmp ult i32 %14, %17
br i1 %18, label %19, label %23
19: ; preds = %13
%20 = load i32, i32* %2
%21 = load i32, i32* %2
%22 = mul i32 %21, %20
store i32 %22, i32* %2
br label %26
23: ; preds = %13
%24 = load i32, i32* %2
%25 = add i32 %24, 1
store i32 %25, i32* %2
br label %26
26: ; preds = %23, %19
br label %9
27: ; preds = %9
%28 = load i32, i32* %2
%29 = load i32, i32* %3
%30 = icmp eq i32 %28, %29
%31 = zext i1 %30 to i32
%32 = call i32 @__VERIFIER_assert(i32 %31)
%33 = load i32, i32* %1
ret i32 %33
}

LLVM IR (-O2):
define i32 @main() {
%1 = tail call i32 (...) @__VERIFIER_nondet_uint()
%2 = icmp ne i32 %1, 0
%3 = zext i1 %2 to i32
%4 = tail call i32 @__VERIFIER_assume(i32 %3)
%5 = icmp ugt i32 %1, 1
br i1 %5, label %6, label %7
6: ; preds = %0, %6
br label %6
7: ; preds = %0
%8 = icmp eq i32 %1, 1
%9 = zext i1 %8 to i32
%10 = tail call i32 @__VERIFIER_assert(i32 %9)
ret i32 0
}