#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ __VERIFIER_assert(int);
int __VERIFIER_nondet_int();
void main() {
  int scheme;
  int urilen, tokenlen;
  int cp, c;
  urilen = __VERIFIER_nondet_int();
  tokenlen = __VERIFIER_nondet_int();
  scheme = __VERIFIER_nondet_int();
  if (urilen > 0)
    ;
  else
    goto END;
  if (tokenlen > 0)
    ;
  else
    goto END;
  if (scheme >= 0)
    ;
  else
    goto END;
  if (scheme == 0 || (urilen - 1 < scheme)) {
    goto END;
  }
  cp = scheme;
  __VERIFIER_assert(cp - 1 < urilen);
  __VERIFIER_assert(0 <= cp - 1);
  if (__VERIFIER_nondet_int()) {
    __VERIFIER_assert(cp < urilen);
    __VERIFIER_assert(0 <= cp);
    while (cp != urilen - 1) {
      if (__VERIFIER_nondet_int())
        break;
      __VERIFIER_assert(cp < urilen);
      __VERIFIER_assert(0 <= cp);
      ++cp;
    }
    __VERIFIER_assert(cp < urilen);
    __VERIFIER_assert(0 <= cp);
    if (cp == urilen - 1)
      goto END;
    __VERIFIER_assert(cp + 1 < urilen);
    __VERIFIER_assert(0 <= cp + 1);
    if (cp + 1 == urilen - 1)
      goto END;
    ++cp;
    scheme = cp;
    if (__VERIFIER_nondet_int()) {
      c = 0;
      __VERIFIER_assert(cp < urilen);
      __VERIFIER_assert(0 <= cp);
      while (cp != urilen - 1 && c < tokenlen - 1) {
        __VERIFIER_assert(cp < urilen);
        __VERIFIER_assert(0 <= cp);
        if (__VERIFIER_nondet_int()) {
          ++c;
          __VERIFIER_assert(c < tokenlen);
          __VERIFIER_assert(0 <= c);
          __VERIFIER_assert(cp < urilen);
          __VERIFIER_assert(0 <= cp);
        }
        ++cp;
      }
      goto END;
    }
  }
END:
  return;
}


x86 assembly (clang, -O0):
<main>:
push   %rbp
mov    %rsp,%rbp
sub    $0x20,%rsp
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x8(%rbp)
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,-0xc(%rbp)
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x4(%rbp)
cmpl   $0x0,-0x8(%rbp)
jle    1155 <main+0x35>
jmp    115a <main+0x3a>
jmp    1409 <main+0x2e9>
cmpl   $0x0,-0xc(%rbp)
jle    1169 <main+0x49>
jmp    116e <main+0x4e>
jmp    1409 <main+0x2e9>
cmpl   $0x0,-0x4(%rbp)
jl     117d <main+0x5d>
jmp    1182 <main+0x62>
jmp    1409 <main+0x2e9>
cmpl   $0x0,-0x4(%rbp)
je     119b <main+0x7b>
mov    -0x8(%rbp),%eax
sub    $0x1,%eax
cmp    -0x4(%rbp),%eax
jge    11a0 <main+0x80>
jmp    1409 <main+0x2e9>
mov    -0x4(%rbp),%eax
mov    %eax,-0x10(%rbp)
mov    -0x10(%rbp),%eax
sub    $0x1,%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%ecx
sub    $0x1,%ecx
xor    %eax,%eax
cmp    %ecx,%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
cmp    $0x0,%eax
je     1404 <main+0x2e4>
mov    -0x10(%rbp),%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
cmp    -0x10(%rbp),%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%eax
mov    -0x8(%rbp),%ecx
sub    $0x1,%ecx
cmp    %ecx,%eax
je     1261 <main+0x141>
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
cmp    $0x0,%eax
je     122e <main+0x10e>
jmp    1261 <main+0x141>
mov    -0x10(%rbp),%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
cmp    -0x10(%rbp),%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x10(%rbp)
jmp    1208 <main+0xe8>
mov    -0x10(%rbp),%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
cmp    -0x10(%rbp),%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%eax
mov    -0x8(%rbp),%ecx
sub    $0x1,%ecx
cmp    %ecx,%eax
jne    129c <main+0x17c>
jmp    1409 <main+0x2e9>
mov    -0x10(%rbp),%eax
add    $0x1,%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%ecx
add    $0x1,%ecx
xor    %eax,%eax
cmp    %ecx,%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%eax
add    $0x1,%eax
mov    -0x8(%rbp),%ecx
sub    $0x1,%ecx
cmp    %ecx,%eax
jne    12e2 <main+0x1c2>
jmp    1409 <main+0x2e9>
mov    -0x10(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x10(%rbp)
mov    -0x10(%rbp),%eax
mov    %eax,-0x4(%rbp)
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
cmp    $0x0,%eax
je     13ff <main+0x2df>
movl   $0x0,-0x14(%rbp)
mov    -0x10(%rbp),%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
cmp    -0x10(%rbp),%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%ecx
mov    -0x8(%rbp),%edx
sub    $0x1,%edx
xor    %eax,%eax
cmp    %edx,%ecx
mov    %al,-0x15(%rbp)
je     1354 <main+0x234>
mov    -0x14(%rbp),%eax
mov    -0xc(%rbp),%ecx
sub    $0x1,%ecx
cmp    %ecx,%eax
setl   %al
mov    %al,-0x15(%rbp)
mov    -0x15(%rbp),%al
test   $0x1,%al
jne    1364 <main+0x244>
jmp    13fa <main+0x2da>
mov    -0x10(%rbp),%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
cmp    -0x10(%rbp),%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
cmp    $0x0,%eax
je     13ec <main+0x2cc>
mov    -0x14(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x14(%rbp)
mov    -0x14(%rbp),%eax
cmp    -0xc(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
cmp    -0x14(%rbp),%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%eax
cmp    -0x8(%rbp),%eax
setl   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
cmp    -0x10(%rbp),%eax
setle  %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x10(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x10(%rbp)
jmp    132d <main+0x20d>
jmp    1409 <main+0x2e9>
jmp    1404 <main+0x2e4>
jmp    1409 <main+0x2e9>
add    $0x20,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<main>:
push   %rbp
push   %r15
push   %r14
push   %r13
push   %r12
push   %rbx
sub    $0x18,%rsp
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,%r15d
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,%ebp
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
test   %r15d,%r15d
jle    132e <main+0x20e>
test   %ebp,%ebp
jle    132e <main+0x20e>
mov    %eax,%ebx
test   %eax,%eax
js     132e <main+0x20e>
je     132e <main+0x20e>
cmp    %ebx,%r15d
jbe    132e <main+0x20e>
mov    $0x1,%edi
call   1040 <__VERIFIER_assert@plt>
mov    $0x1,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
test   %eax,%eax
je     132e <main+0x20e>
lea    -0x1(%r15),%r14d
mov    $0x1,%edi
call   1040 <__VERIFIER_assert@plt>
mov    %ebx,%r13d
not    %r13d
mov    %r13d,%r12d
shr    $0x1f,%r12d
mov    %r12d,%edi
call   1040 <__VERIFIER_assert@plt>
cmp    %r14d,%ebx
jne    11c1 <main+0xa1>
mov    %ebx,%eax
jmp    1210 <main+0xf0>
mov    %r14d,(%rsp)
mov    %rbp,0x8(%rsp)
mov    %r15d,%r12d
neg    %r12d
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,%ebp
xor    %edi,%edi
mov    %ebx,%r14d
sub    %r15d,%r14d
setl   %dil
call   1040 <__VERIFIER_assert@plt>
mov    %r13d,%edi
shr    $0x1f,%edi
call   1040 <__VERIFIER_assert@plt>
test   %ebp,%ebp
jne    1234 <main+0x114>
add    $0x1,%ebx
lea    (%r12,%rbx,1),%eax
add    $0xffffffff,%r13d
cmp    $0xffffffff,%eax
jne    11d0 <main+0xb0>
shr    $0x1f,%r12d
mov    (%rsp),%eax
xor    %edi,%edi
cmp    %r15d,%eax
setl   %dil
call   1040 <__VERIFIER_assert@plt>
mov    %r12d,%edi
add    $0x18,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
jmp    1040 <__VERIFIER_assert@plt>
lea    0x1(%rbx),%r13d
xor    %r12d,%r12d
cmp    %r15d,%r13d
setl   %r12b
mov    %r12d,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %ebp,%ebp
cmp    $0xffffffff,%ebx
setge  %bpl
mov    %ebp,%edi
call   1040 <__VERIFIER_assert@plt>
cmp    $0xfffffffe,%r14d
mov    0x8(%rsp),%r14
je     132e <main+0x20e>
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
test   %eax,%eax
je     132e <main+0x20e>
mov    %r12d,%edi
call   1040 <__VERIFIER_assert@plt>
mov    %ebp,%edi
call   1040 <__VERIFIER_assert@plt>
cmp    $0x2,%r14d
jl     132e <main+0x20e>
mov    $0xfffffffe,%r12d
sub    %ebx,%r12d
lea    -0x1(%r14),%eax
mov    %eax,0x4(%rsp)
mov    $0x3,%eax
sub    %r15d,%eax
mov    %rax,0x10(%rsp)
xor    %r14d,%r14d
xor    %ebx,%ebx
cmp    %r15d,%r13d
setl   %bl
mov    %ebx,%edi
call   1040 <__VERIFIER_assert@plt>
mov    %r12d,%ebp
shr    $0x1f,%ebp
mov    %ebp,%edi
call   1040 <__VERIFIER_assert@plt>
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
test   %eax,%eax
je     1312 <main+0x1f2>
lea    0x1(%r14),%eax
mov    %eax,(%rsp)
xor    %edi,%edi
cmp    0x8(%rsp),%eax
setl   %dil
call   1040 <__VERIFIER_assert@plt>
xor    %edi,%edi
cmp    $0xffffffff,%r14d
setge  %dil
call   1040 <__VERIFIER_assert@plt>
mov    %ebx,%edi
call   1040 <__VERIFIER_assert@plt>
mov    %ebp,%edi
call   1040 <__VERIFIER_assert@plt>
mov    (%rsp),%eax
mov    %eax,%r14d
mov    0x10(%rsp),%rax
add    %r13d,%eax
cmp    $0x1,%eax
je     132e <main+0x20e>
add    $0x1,%r13d
add    $0xffffffff,%r12d
cmp    0x4(%rsp),%r14d
jl     12b2 <main+0x192>
add    $0x18,%rsp
pop    %rbx
pop    %r12
pop    %r13
pop    %r14
pop    %r15
pop    %rbp
ret

LLVM IR (-O0):
define void @main() {
%1 = alloca i32
%2 = alloca i32
%3 = alloca i32
%4 = alloca i32
%5 = alloca i32
%6 = call i32 (...) @__VERIFIER_nondet_int()
store i32 %6, i32* %2
%7 = call i32 (...) @__VERIFIER_nondet_int()
store i32 %7, i32* %3
%8 = call i32 (...) @__VERIFIER_nondet_int()
store i32 %8, i32* %1
%9 = load i32, i32* %2
%10 = icmp sgt i32 %9, 0
br i1 %10, label %11, label %12
11: ; preds = %0
br label %13
12: ; preds = %0
br label %178
13: ; preds = %11
%14 = load i32, i32* %3
%15 = icmp sgt i32 %14, 0
br i1 %15, label %16, label %17
16: ; preds = %13
br label %18
17: ; preds = %13
br label %178
18: ; preds = %16
%19 = load i32, i32* %1
%20 = icmp sge i32 %19, 0
br i1 %20, label %21, label %22
21: ; preds = %18
br label %23
22: ; preds = %18
br label %178
23: ; preds = %21
%24 = load i32, i32* %1
%25 = icmp eq i32 %24, 0
br i1 %25, label %31, label %26
26: ; preds = %23
%27 = load i32, i32* %2
%28 = sub nsw i32 %27, 1
%29 = load i32, i32* %1
%30 = icmp slt i32 %28, %29
br i1 %30, label %31, label %32
31: ; preds = %26, %23
br label %178
32: ; preds = %26
%33 = load i32, i32* %1
store i32 %33, i32* %4
%34 = load i32, i32* %4
%35 = sub nsw i32 %34, 1
%36 = load i32, i32* %2
%37 = icmp slt i32 %35, %36
%38 = zext i1 %37 to i32
%39 = call i32 @__VERIFIER_assert(i32 %38)
%40 = load i32, i32* %4
%41 = sub nsw i32 %40, 1
%42 = icmp sle i32 0, %41
%43 = zext i1 %42 to i32
%44 = call i32 @__VERIFIER_assert(i32 %43)
%45 = call i32 (...) @__VERIFIER_nondet_int()
%46 = icmp ne i32 %45, 0
br i1 %46, label %47, label %177
47: ; preds = %32
%48 = load i32, i32* %4
%49 = load i32, i32* %2
%50 = icmp slt i32 %48, %49
%51 = zext i1 %50 to i32
%52 = call i32 @__VERIFIER_assert(i32 %51)
%53 = load i32, i32* %4
%54 = icmp sle i32 0, %53
%55 = zext i1 %54 to i32
%56 = call i32 @__VERIFIER_assert(i32 %55)
br label %57
57: ; preds = %66, %47
%58 = load i32, i32* %4
%59 = load i32, i32* %2
%60 = sub nsw i32 %59, 1
%61 = icmp ne i32 %58, %60
br i1 %61, label %62, label %78
62: ; preds = %57
%63 = call i32 (...) @__VERIFIER_nondet_int()
%64 = icmp ne i32 %63, 0
br i1 %64, label %65, label %66
65: ; preds = %62
br label %78
66: ; preds = %62
%67 = load i32, i32* %4
%68 = load i32, i32* %2
%69 = icmp slt i32 %67, %68
%70 = zext i1 %69 to i32
%71 = call i32 @__VERIFIER_assert(i32 %70)
%72 = load i32, i32* %4
%73 = icmp sle i32 0, %72
%74 = zext i1 %73 to i32
%75 = call i32 @__VERIFIER_assert(i32 %74)
%76 = load i32, i32* %4
%77 = add nsw i32 %76, 1
store i32 %77, i32* %4
br label %57
78: ; preds = %65, %57
%79 = load i32, i32* %4
%80 = load i32, i32* %2
%81 = icmp slt i32 %79, %80
%82 = zext i1 %81 to i32
%83 = call i32 @__VERIFIER_assert(i32 %82)
%84 = load i32, i32* %4
%85 = icmp sle i32 0, %84
%86 = zext i1 %85 to i32
%87 = call i32 @__VERIFIER_assert(i32 %86)
%88 = load i32, i32* %4
%89 = load i32, i32* %2
%90 = sub nsw i32 %89, 1
%91 = icmp eq i32 %88, %90
br i1 %91, label %92, label %93
92: ; preds = %78
br label %178
93: ; preds = %78
%94 = load i32, i32* %4
%95 = add nsw i32 %94, 1
%96 = load i32, i32* %2
%97 = icmp slt i32 %95, %96
%98 = zext i1 %97 to i32
%99 = call i32 @__VERIFIER_assert(i32 %98)
%100 = load i32, i32* %4
%101 = add nsw i32 %100, 1
%102 = icmp sle i32 0, %101
%103 = zext i1 %102 to i32
%104 = call i32 @__VERIFIER_assert(i32 %103)
%105 = load i32, i32* %4
%106 = add nsw i32 %105, 1
%107 = load i32, i32* %2
%108 = sub nsw i32 %107, 1
%109 = icmp eq i32 %106, %108
br i1 %109, label %110, label %111
110: ; preds = %93
br label %178
111: ; preds = %93
%112 = load i32, i32* %4
%113 = add nsw i32 %112, 1
store i32 %113, i32* %4
%114 = load i32, i32* %4
store i32 %114, i32* %1
%115 = call i32 (...) @__VERIFIER_nondet_int()
%116 = icmp ne i32 %115, 0
br i1 %116, label %117, label %176
117: ; preds = %111
store i32 0, i32* %5
%118 = load i32, i32* %4
%119 = load i32, i32* %2
%120 = icmp slt i32 %118, %119
%121 = zext i1 %120 to i32
%122 = call i32 @__VERIFIER_assert(i32 %121)
%123 = load i32, i32* %4
%124 = icmp sle i32 0, %123
%125 = zext i1 %124 to i32
%126 = call i32 @__VERIFIER_assert(i32 %125)
br label %127
127: ; preds = %172, %117
%128 = load i32, i32* %4
%129 = load i32, i32* %2
%130 = sub nsw i32 %129, 1
%131 = icmp ne i32 %128, %130
br i1 %131, label %132, label %137
132: ; preds = %127
%133 = load i32, i32* %5
%134 = load i32, i32* %3
%135 = sub nsw i32 %134, 1
%136 = icmp slt i32 %133, %135
br label %137
137: ; preds = %132, %127
%138 = phi i1 [ false, %127 ], [ %136, %132 ]
br i1 %138, label %139, label %175
139: ; preds = %137
%140 = load i32, i32* %4
%141 = load i32, i32* %2
%142 = icmp slt i32 %140, %141
%143 = zext i1 %142 to i32
%144 = call i32 @__VERIFIER_assert(i32 %143)
%145 = load i32, i32* %4
%146 = icmp sle i32 0, %145
%147 = zext i1 %146 to i32
%148 = call i32 @__VERIFIER_assert(i32 %147)
%149 = call i32 (...) @__VERIFIER_nondet_int()
%150 = icmp ne i32 %149, 0
br i1 %150, label %151, label %172
151: ; preds = %139
%152 = load i32, i32* %5
%153 = add nsw i32 %152, 1
store i32 %153, i32* %5
%154 = load i32, i32* %5
%155 = load i32, i32* %3
%156 = icmp slt i32 %154, %155
%157 = zext i1 %156 to i32
%158 = call i32 @__VERIFIER_assert(i32 %157)
%159 = load i32, i32* %5
%160 = icmp sle i32 0, %159
%161 = zext i1 %160 to i32
%162 = call i32 @__VERIFIER_assert(i32 %161)
%163 = load i32, i32* %4
%164 = load i32, i32* %2
%165 = icmp slt i32 %163, %164
%166 = zext i1 %165 to i32
%167 = call i32 @__VERIFIER_assert(i32 %166)
%168 = load i32, i32* %4
%169 = icmp sle i32 0, %168
%170 = zext i1 %169 to i32
%171 = call i32 @__VERIFIER_assert(i32 %170)
br label %172
172: ; preds = %151, %139
%173 = load i32, i32* %4
%174 = add nsw i32 %173, 1
store i32 %174, i32* %4
br label %127
175: ; preds = %137
br label %178
176: ; preds = %111
br label %177
177: ; preds = %176, %32
br label %178
178: ; preds = %177, %175, %110, %92, %31, %22, %17, %12
ret void
}

LLVM IR (-O2):
define void @main() {
%1 = tail call i32 (...) @__VERIFIER_nondet_int()
%2 = tail call i32 (...) @__VERIFIER_nondet_int()
%3 = tail call i32 (...) @__VERIFIER_nondet_int()
%4 = icmp slt i32 %1, 1
%5 = icmp slt i32 %2, 1
%6 = select i1 %4, i1 true, i1 %5
%7 = icmp slt i32 %3, 0
%8 = select i1 %6, i1 true, i1 %7
%9 = icmp eq i32 %3, 0
%10 = select i1 %8, i1 true, i1 %9
br i1 %10, label %91, label %11
11: ; preds = %0
%12 = add nsw i32 %1, -1
%13 = icmp ugt i32 %1, %3
br i1 %13, label %14, label %91
14: ; preds = %11
%15 = tail call i32 @__VERIFIER_assert(i32 1)
%16 = tail call i32 @__VERIFIER_assert(i32 1)
%17 = tail call i32 (...) @__VERIFIER_nondet_int()
%18 = icmp eq i32 %17, 0
br i1 %18, label %91, label %19
19: ; preds = %14
%20 = tail call i32 @__VERIFIER_assert(i32 1)
%21 = xor i32 %3, -1
%22 = lshr i32 %21, 31
%23 = tail call i32 @__VERIFIER_assert(i32 %22)
%24 = icmp eq i32 %3, %12
br i1 %24, label %84, label %25
25: ; preds = %19, %36
%26 = phi i32 [ %35, %36 ], [ %3, %19 ]
%27 = tail call i32 (...) @__VERIFIER_nondet_int()
%28 = icmp eq i32 %27, 0
%29 = icmp slt i32 %26, %1
%30 = zext i1 %29 to i32
%31 = tail call i32 @__VERIFIER_assert(i32 %30)
%32 = xor i32 %26, -1
%33 = lshr i32 %32, 31
%34 = tail call i32 @__VERIFIER_assert(i32 %33)
%35 = add nsw i32 %26, 1
br i1 %28, label %36, label %38
36: ; preds = %25
%37 = icmp eq i32 %35, %12
br i1 %37, label %81, label %25
38: ; preds = %25
%39 = icmp slt i32 %35, %1
%40 = zext i1 %39 to i32
%41 = tail call i32 @__VERIFIER_assert(i32 %40)
%42 = icmp sgt i32 %26, -2
%43 = zext i1 %42 to i32
%44 = tail call i32 @__VERIFIER_assert(i32 %43)
%45 = icmp eq i32 %35, %12
br i1 %45, label %91, label %46
46: ; preds = %38
%47 = tail call i32 (...) @__VERIFIER_nondet_int()
%48 = icmp eq i32 %47, 0
br i1 %48, label %91, label %49
49: ; preds = %46
%50 = tail call i32 @__VERIFIER_assert(i32 %40)
%51 = tail call i32 @__VERIFIER_assert(i32 %43)
%52 = add nsw i32 %2, -1
%53 = icmp sgt i32 %2, 1
br i1 %53, label %54, label %91
54: ; preds = %49, %75
%55 = phi i32 [ %76, %75 ], [ 0, %49 ]
%56 = phi i32 [ %77, %75 ], [ %35, %49 ]
%57 = icmp slt i32 %56, %1
%58 = zext i1 %57 to i32
%59 = tail call i32 @__VERIFIER_assert(i32 %58)
%60 = xor i32 %56, -1
%61 = lshr i32 %60, 31
%62 = tail call i32 @__VERIFIER_assert(i32 %61)
%63 = tail call i32 (...) @__VERIFIER_nondet_int()
%64 = icmp eq i32 %63, 0
br i1 %64, label %75, label %65
65: ; preds = %54
%66 = add nsw i32 %55, 1
%67 = icmp slt i32 %66, %2
%68 = zext i1 %67 to i32
%69 = tail call i32 @__VERIFIER_assert(i32 %68)
%70 = icmp sgt i32 %55, -2
%71 = zext i1 %70 to i32
%72 = tail call i32 @__VERIFIER_assert(i32 %71)
%73 = tail call i32 @__VERIFIER_assert(i32 %58)
%74 = tail call i32 @__VERIFIER_assert(i32 %61)
br label %75
75: ; preds = %65, %54
%76 = phi i32 [ %66, %65 ], [ %55, %54 ]
%77 = add nsw i32 %56, 1
%78 = icmp ne i32 %77, %12
%79 = icmp slt i32 %76, %52
%80 = select i1 %78, i1 %79, i1 false
br i1 %80, label %54, label %91
81: ; preds = %36
%82 = sub i32 0, %1
%83 = lshr i32 %82, 31
br label %84
84: ; preds = %81, %19
%85 = phi i32 [ %83, %81 ], [ %22, %19 ]
%86 = phi i32 [ %12, %81 ], [ %3, %19 ]
%87 = icmp slt i32 %86, %1
%88 = zext i1 %87 to i32
%89 = tail call i32 @__VERIFIER_assert(i32 %88)
%90 = tail call i32 @__VERIFIER_assert(i32 %85)
br label %91
91: ; preds = %75, %49, %84, %14, %46, %38, %11, %0
ret void
}