#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ __VERIFIER_assert(int);
int /*<<< orphan*/ __VERIFIER_assume(int);
int __VERIFIER_nondet_int();
void main() {
  int n0, n1;
  int i0 = 0;
  int k = 0;
  n0 = __VERIFIER_nondet_int();
  n1 = __VERIFIER_nondet_int();
  __VERIFIER_assume(-1000000 <= n0 && n0 < 1000000);
  __VERIFIER_assume(-1000000 <= n1 && n1 < 1000000);
  while (i0 < n0) {
    i0++;
    k++;
  }
  int i1 = 0;
  while (i1 < n1) {
    i1++;
    k++;
  }
  int j1 = 0;
  while (j1 < n0 + n1) {
    __VERIFIER_assert(k > 0);
    j1++;
    k--;
  }
}


x86 assembly (clang, -O0):
<main>:
push   %rbp
mov    %rsp,%rbp
sub    $0x20,%rsp
movl   $0x0,-0xc(%rbp)
movl   $0x0,-0x10(%rbp)
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x4(%rbp)
mov    $0x0,%al
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,-0x8(%rbp)
xor    %eax,%eax
mov    $0xfff0bdc0,%ecx
cmp    -0x4(%rbp),%ecx
mov    %al,-0x19(%rbp)
jg     117a <main+0x4a>
cmpl   $0xf4240,-0x4(%rbp)
setl   %al
mov    %al,-0x19(%rbp)
mov    -0x19(%rbp),%al
and    $0x1,%al
movzbl %al,%edi
call   1050 <__VERIFIER_assume@plt>
xor    %eax,%eax
mov    $0xfff0bdc0,%ecx
cmp    -0x8(%rbp),%ecx
mov    %al,-0x1a(%rbp)
jg     11a7 <main+0x77>
cmpl   $0xf4240,-0x8(%rbp)
setl   %al
mov    %al,-0x1a(%rbp)
mov    -0x1a(%rbp),%al
and    $0x1,%al
movzbl %al,%edi
call   1050 <__VERIFIER_assume@plt>
mov    -0xc(%rbp),%eax
cmp    -0x4(%rbp),%eax
jge    11d7 <main+0xa7>
mov    -0xc(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0xc(%rbp)
mov    -0x10(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x10(%rbp)
jmp    11b4 <main+0x84>
movl   $0x0,-0x14(%rbp)
mov    -0x14(%rbp),%eax
cmp    -0x8(%rbp),%eax
jge    1201 <main+0xd1>
mov    -0x14(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x14(%rbp)
mov    -0x10(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x10(%rbp)
jmp    11de <main+0xae>
movl   $0x0,-0x18(%rbp)
mov    -0x18(%rbp),%eax
mov    -0x4(%rbp),%ecx
add    -0x8(%rbp),%ecx
cmp    %ecx,%eax
jge    1241 <main+0x111>
cmpl   $0x0,-0x10(%rbp)
setg   %al
and    $0x1,%al
movzbl %al,%edi
call   1040 <__VERIFIER_assert@plt>
mov    -0x18(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x18(%rbp)
mov    -0x10(%rbp),%eax
add    $0xffffffff,%eax
mov    %eax,-0x10(%rbp)
jmp    1208 <main+0xd8>
add    $0x20,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<main>:
push   %rbp
push   %r15
push   %r14
push   %rbx
push   %rax
xor    %ebp,%ebp
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,%r15d
xor    %eax,%eax
call   1030 <__VERIFIER_nondet_int@plt>
mov    %eax,%r14d
lea    0xf4240(%r15),%eax
xor    %edi,%edi
cmp    $0x1e8480,%eax
setb   %dil
call   1050 <__VERIFIER_assume@plt>
lea    0xf4240(%r14),%eax
xor    %edi,%edi
cmp    $0x1e8480,%eax
setb   %dil
call   1050 <__VERIFIER_assume@plt>
lea    (%r14,%r15,1),%ebx
test   %ebx,%ebx
jle    11b5 <main+0x85>
test   %r15d,%r15d
cmovs  %ebp,%r15d
test   %r14d,%r14d
cmovns %r14d,%ebp
add    %r15d,%ebp
cs nopw 0x0(%rax,%rax,1)
xchg   %ax,%ax
xor    %edi,%edi
test   %ebp,%ebp
setg   %dil
call   1040 <__VERIFIER_assert@plt>
add    $0xffffffff,%ebp
add    $0xffffffff,%ebx
jne    11a0 <main+0x70>
add    $0x8,%rsp
pop    %rbx
pop    %r14
pop    %r15
pop    %rbp
ret

LLVM IR (-O0):
define void @main() {
%1 = alloca i32
%2 = alloca i32
%3 = alloca i32
%4 = alloca i32
%5 = alloca i32
%6 = alloca i32
store i32 0, i32* %3
store i32 0, i32* %4
%7 = call i32 (...) @__VERIFIER_nondet_int()
store i32 %7, i32* %1
%8 = call i32 (...) @__VERIFIER_nondet_int()
store i32 %8, i32* %2
%9 = load i32, i32* %1
%10 = icmp sle i32 -1000000, %9
br i1 %10, label %11, label %14
11: ; preds = %0
%12 = load i32, i32* %1
%13 = icmp slt i32 %12, 1000000
br label %14
14: ; preds = %11, %0
%15 = phi i1 [ false, %0 ], [ %13, %11 ]
%16 = zext i1 %15 to i32
%17 = call i32 @__VERIFIER_assume(i32 %16)
%18 = load i32, i32* %2
%19 = icmp sle i32 -1000000, %18
br i1 %19, label %20, label %23
20: ; preds = %14
%21 = load i32, i32* %2
%22 = icmp slt i32 %21, 1000000
br label %23
23: ; preds = %20, %14
%24 = phi i1 [ false, %14 ], [ %22, %20 ]
%25 = zext i1 %24 to i32
%26 = call i32 @__VERIFIER_assume(i32 %25)
br label %27
27: ; preds = %31, %23
%28 = load i32, i32* %3
%29 = load i32, i32* %1
%30 = icmp slt i32 %28, %29
br i1 %30, label %31, label %36
31: ; preds = %27
%32 = load i32, i32* %3
%33 = add nsw i32 %32, 1
store i32 %33, i32* %3
%34 = load i32, i32* %4
%35 = add nsw i32 %34, 1
store i32 %35, i32* %4
br label %27
36: ; preds = %27
store i32 0, i32* %5
br label %37
37: ; preds = %41, %36
%38 = load i32, i32* %5
%39 = load i32, i32* %2
%40 = icmp slt i32 %38, %39
br i1 %40, label %41, label %46
41: ; preds = %37
%42 = load i32, i32* %5
%43 = add nsw i32 %42, 1
store i32 %43, i32* %5
%44 = load i32, i32* %4
%45 = add nsw i32 %44, 1
store i32 %45, i32* %4
br label %37
46: ; preds = %37
store i32 0, i32* %6
br label %47
47: ; preds = %53, %46
%48 = load i32, i32* %6
%49 = load i32, i32* %1
%50 = load i32, i32* %2
%51 = add nsw i32 %49, %50
%52 = icmp slt i32 %48, %51
br i1 %52, label %53, label %62
53: ; preds = %47
%54 = load i32, i32* %4
%55 = icmp sgt i32 %54, 0
%56 = zext i1 %55 to i32
%57 = call i32 @__VERIFIER_assert(i32 %56)
%58 = load i32, i32* %6
%59 = add nsw i32 %58, 1
store i32 %59, i32* %6
%60 = load i32, i32* %4
%61 = add nsw i32 %60, -1
store i32 %61, i32* %4
br label %47
62: ; preds = %47
ret void
}

LLVM IR (-O2):
define void @main() {
%1 = tail call i32 (...) @__VERIFIER_nondet_int()
%2 = tail call i32 (...) @__VERIFIER_nondet_int()
%3 = add i32 %1, 1000000
%4 = icmp ult i32 %3, 2000000
%5 = zext i1 %4 to i32
%6 = tail call i32 @__VERIFIER_assume(i32 %5)
%7 = add i32 %2, 1000000
%8 = icmp ult i32 %7, 2000000
%9 = zext i1 %8 to i32
%10 = tail call i32 @__VERIFIER_assume(i32 %9)
%11 = add i32 %2, %1
%12 = icmp sgt i32 %11, 0
br i1 %12, label %13, label %28
13: ; preds = %0
%14 = icmp sgt i32 %1, 0
%15 = select i1 %14, i32 %1, i32 0
%16 = icmp sgt i32 %2, 0
%17 = select i1 %16, i32 %2, i32 0
%18 = add nuw i32 %15, %17
br label %19
19: ; preds = %13, %19
%20 = phi i32 [ %25, %19 ], [ 0, %13 ]
%21 = phi i32 [ %26, %19 ], [ %18, %13 ]
%22 = icmp sgt i32 %21, 0
%23 = zext i1 %22 to i32
%24 = tail call i32 @__VERIFIER_assert(i32 %23)
%25 = add nuw nsw i32 %20, 1
%26 = add nsw i32 %21, -1
%27 = icmp eq i32 %25, %11
br i1 %27, label %28, label %19
28: ; preds = %19, %0
ret void
}