#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
char *cpystr(char *);
int random();
int /*<<< orphan*/ sprintf(char *, char *, int);
int strlen(char *);
char *oauth2_generate_state(void) {
  char rv[36];
  int i;
  rv[0] = '\0';
  for (i = 0; i < 4; i++)
    sprintf(rv + strlen(rv), "%x", random() % 256);
  sprintf(rv + strlen(rv), "%c", '-');
  for (i = 0; i < 2; i++)
    sprintf(rv + strlen(rv), "%x", random() % 256);
  sprintf(rv + strlen(rv), "%c", '-');
  for (i = 0; i < 2; i++)
    sprintf(rv + strlen(rv), "%x", random() % 256);
  sprintf(rv + strlen(rv), "%c", '-');
  for (i = 0; i < 2; i++)
    sprintf(rv + strlen(rv), "%x", random() % 256);
  sprintf(rv + strlen(rv), "%c", '-');
  for (i = 0; i < 6; i++)
    sprintf(rv + strlen(rv), "%x", random() % 256);
  rv[36] = '\0';
  return cpystr(rv);
}


x86 assembly (clang, -O0):
<oauth2_generate_state>:
push   %rbp
mov    %rsp,%rbp
sub    $0xb0,%rsp
movb   $0x0,-0x30(%rbp)
movl   $0x0,-0x34(%rbp)
cmpl   $0x4,-0x34(%rbp)
jge    11ae <oauth2_generate_state+0x6e>
lea    -0x30(%rbp),%rax
mov    %rax,-0x48(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    %eax,%ecx
mov    -0x48(%rbp),%rax
movslq %ecx,%rcx
add    %rcx,%rax
mov    %rax,-0x40(%rbp)
mov    $0x0,%al
call   1050 <random@plt>
mov    -0x40(%rbp),%rdi
mov    $0x100,%ecx
cltd
idiv   %ecx
lea    0xe65(%rip),%rsi
call   1060 <sprintf@plt>
mov    -0x34(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x34(%rbp)
jmp    1156 <oauth2_generate_state+0x16>
lea    -0x30(%rbp),%rax
mov    %rax,-0x50(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    -0x50(%rbp),%rdi
cltq
add    %rax,%rdi
lea    0xe34(%rip),%rsi
mov    $0x2d,%edx
call   1060 <sprintf@plt>
movl   $0x0,-0x34(%rbp)
cmpl   $0x2,-0x34(%rbp)
jge    1238 <oauth2_generate_state+0xf8>
lea    -0x30(%rbp),%rax
mov    %rax,-0x60(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    %eax,%ecx
mov    -0x60(%rbp),%rax
movslq %ecx,%rcx
add    %rcx,%rax
mov    %rax,-0x58(%rbp)
mov    $0x0,%al
call   1050 <random@plt>
mov    -0x58(%rbp),%rdi
mov    $0x100,%ecx
cltd
idiv   %ecx
lea    0xddb(%rip),%rsi
call   1060 <sprintf@plt>
mov    -0x34(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x34(%rbp)
jmp    11e0 <oauth2_generate_state+0xa0>
lea    -0x30(%rbp),%rax
mov    %rax,-0x68(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    -0x68(%rbp),%rdi
cltq
add    %rax,%rdi
lea    0xdaa(%rip),%rsi
mov    $0x2d,%edx
call   1060 <sprintf@plt>
movl   $0x0,-0x34(%rbp)
cmpl   $0x2,-0x34(%rbp)
jge    12c2 <oauth2_generate_state+0x182>
lea    -0x30(%rbp),%rax
mov    %rax,-0x78(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    %eax,%ecx
mov    -0x78(%rbp),%rax
movslq %ecx,%rcx
add    %rcx,%rax
mov    %rax,-0x70(%rbp)
mov    $0x0,%al
call   1050 <random@plt>
mov    -0x70(%rbp),%rdi
mov    $0x100,%ecx
cltd
idiv   %ecx
lea    0xd51(%rip),%rsi
call   1060 <sprintf@plt>
mov    -0x34(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x34(%rbp)
jmp    126a <oauth2_generate_state+0x12a>
lea    -0x30(%rbp),%rax
mov    %rax,-0x80(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    -0x80(%rbp),%rdi
cltq
add    %rax,%rdi
lea    0xd20(%rip),%rsi
mov    $0x2d,%edx
call   1060 <sprintf@plt>
movl   $0x0,-0x34(%rbp)
cmpl   $0x2,-0x34(%rbp)
jge    1358 <oauth2_generate_state+0x218>
lea    -0x30(%rbp),%rax
mov    %rax,-0x90(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    %eax,%ecx
mov    -0x90(%rbp),%rax
movslq %ecx,%rcx
add    %rcx,%rax
mov    %rax,-0x88(%rbp)
mov    $0x0,%al
call   1050 <random@plt>
mov    -0x88(%rbp),%rdi
mov    $0x100,%ecx
cltd
idiv   %ecx
lea    0xcbb(%rip),%rsi
call   1060 <sprintf@plt>
mov    -0x34(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x34(%rbp)
jmp    12f4 <oauth2_generate_state+0x1b4>
lea    -0x30(%rbp),%rax
mov    %rax,-0x98(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    -0x98(%rbp),%rdi
cltq
add    %rax,%rdi
lea    0xc84(%rip),%rsi
mov    $0x2d,%edx
call   1060 <sprintf@plt>
movl   $0x0,-0x34(%rbp)
cmpl   $0x6,-0x34(%rbp)
jge    13f4 <oauth2_generate_state+0x2b4>
lea    -0x30(%rbp),%rax
mov    %rax,-0xa8(%rbp)
lea    -0x30(%rbp),%rdi
call   1040 <strlen@plt>
mov    %eax,%ecx
mov    -0xa8(%rbp),%rax
movslq %ecx,%rcx
add    %rcx,%rax
mov    %rax,-0xa0(%rbp)
mov    $0x0,%al
call   1050 <random@plt>
mov    -0xa0(%rbp),%rdi
mov    $0x100,%ecx
cltd
idiv   %ecx
lea    0xc1f(%rip),%rsi
call   1060 <sprintf@plt>
mov    -0x34(%rbp),%eax
add    $0x1,%eax
mov    %eax,-0x34(%rbp)
jmp    1390 <oauth2_generate_state+0x250>
movb   $0x0,-0xc(%rbp)
lea    -0x30(%rbp),%rdi
call   1030 <cpystr@plt>
add    $0xb0,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<oauth2_generate_state>:
push   %r15
push   %r14
push   %rbx
sub    $0x30,%rsp
movb   $0x0,(%rsp)
mov    %rsp,%r15
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
lea    0xe81(%rip),%r14
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
movw   $0x2d,(%rsp,%rax,1)
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
movw   $0x2d,(%rsp,%rax,1)
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
movw   $0x2d,(%rsp,%rax,1)
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
movw   $0x2d,(%rsp,%rax,1)
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
mov    %r15,%rdi
call   1040 <strlen@plt>
cltq
lea    (%rsp,%rax,1),%rbx
xor    %eax,%eax
call   1050 <random@plt>
lea    0xff(%rax),%ecx
test   %eax,%eax
cmovns %eax,%ecx
and    $0xffffff00,%ecx
sub    %ecx,%eax
mov    %rbx,%rdi
mov    %r14,%rsi
mov    %eax,%edx
call   1060 <sprintf@plt>
movb   $0x0,0x24(%rsp)
mov    %r15,%rdi
call   1030 <cpystr@plt>
add    $0x30,%rsp
pop    %rbx
pop    %r14
pop    %r15
ret

LLVM IR (-O0):
@.str = [3 x i8] c"%x\00"
@.str.1 = [3 x i8] c"%c\00"
define i8* @oauth2_generate_state() {
%1 = alloca [36 x i8]
%2 = alloca i32
%3 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
store i8 0, i8* %3
store i32 0, i32* %2
br label %4
4: ; preds = %16, %0
%5 = load i32, i32* %2
%6 = icmp slt i32 %5, 4
br i1 %6, label %7, label %19
7: ; preds = %4
%8 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%9 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%10 = call i32 @strlen(i8* %9)
%11 = sext i32 %10 to i64
%12 = getelementptr inbounds i8, i8* %8, i64 %11
%13 = call i32 (...) @random()
%14 = srem i32 %13, 256
%15 = call i32 @sprintf(i8* %12, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %14)
br label %16
16: ; preds = %7
%17 = load i32, i32* %2
%18 = add nsw i32 %17, 1
store i32 %18, i32* %2
br label %4
19: ; preds = %4
%20 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%21 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%22 = call i32 @strlen(i8* %21)
%23 = sext i32 %22 to i64
%24 = getelementptr inbounds i8, i8* %20, i64 %23
%25 = call i32 @sprintf(i8* %24, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str.1, i64 0, i64 0), i32 45)
store i32 0, i32* %2
br label %26
26: ; preds = %38, %19
%27 = load i32, i32* %2
%28 = icmp slt i32 %27, 2
br i1 %28, label %29, label %41
29: ; preds = %26
%30 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%31 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%32 = call i32 @strlen(i8* %31)
%33 = sext i32 %32 to i64
%34 = getelementptr inbounds i8, i8* %30, i64 %33
%35 = call i32 (...) @random()
%36 = srem i32 %35, 256
%37 = call i32 @sprintf(i8* %34, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %36)
br label %38
38: ; preds = %29
%39 = load i32, i32* %2
%40 = add nsw i32 %39, 1
store i32 %40, i32* %2
br label %26
41: ; preds = %26
%42 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%43 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%44 = call i32 @strlen(i8* %43)
%45 = sext i32 %44 to i64
%46 = getelementptr inbounds i8, i8* %42, i64 %45
%47 = call i32 @sprintf(i8* %46, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str.1, i64 0, i64 0), i32 45)
store i32 0, i32* %2
br label %48
48: ; preds = %60, %41
%49 = load i32, i32* %2
%50 = icmp slt i32 %49, 2
br i1 %50, label %51, label %63
51: ; preds = %48
%52 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%53 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%54 = call i32 @strlen(i8* %53)
%55 = sext i32 %54 to i64
%56 = getelementptr inbounds i8, i8* %52, i64 %55
%57 = call i32 (...) @random()
%58 = srem i32 %57, 256
%59 = call i32 @sprintf(i8* %56, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %58)
br label %60
60: ; preds = %51
%61 = load i32, i32* %2
%62 = add nsw i32 %61, 1
store i32 %62, i32* %2
br label %48
63: ; preds = %48
%64 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%65 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%66 = call i32 @strlen(i8* %65)
%67 = sext i32 %66 to i64
%68 = getelementptr inbounds i8, i8* %64, i64 %67
%69 = call i32 @sprintf(i8* %68, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str.1, i64 0, i64 0), i32 45)
store i32 0, i32* %2
br label %70
70: ; preds = %82, %63
%71 = load i32, i32* %2
%72 = icmp slt i32 %71, 2
br i1 %72, label %73, label %85
73: ; preds = %70
%74 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%75 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%76 = call i32 @strlen(i8* %75)
%77 = sext i32 %76 to i64
%78 = getelementptr inbounds i8, i8* %74, i64 %77
%79 = call i32 (...) @random()
%80 = srem i32 %79, 256
%81 = call i32 @sprintf(i8* %78, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %80)
br label %82
82: ; preds = %73
%83 = load i32, i32* %2
%84 = add nsw i32 %83, 1
store i32 %84, i32* %2
br label %70
85: ; preds = %70
%86 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%87 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%88 = call i32 @strlen(i8* %87)
%89 = sext i32 %88 to i64
%90 = getelementptr inbounds i8, i8* %86, i64 %89
%91 = call i32 @sprintf(i8* %90, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str.1, i64 0, i64 0), i32 45)
store i32 0, i32* %2
br label %92
92: ; preds = %104, %85
%93 = load i32, i32* %2
%94 = icmp slt i32 %93, 6
br i1 %94, label %95, label %107
95: ; preds = %92
%96 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%97 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%98 = call i32 @strlen(i8* %97)
%99 = sext i32 %98 to i64
%100 = getelementptr inbounds i8, i8* %96, i64 %99
%101 = call i32 (...) @random()
%102 = srem i32 %101, 256
%103 = call i32 @sprintf(i8* %100, i8* getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %102)
br label %104
104: ; preds = %95
%105 = load i32, i32* %2
%106 = add nsw i32 %105, 1
store i32 %106, i32* %2
br label %92
107: ; preds = %92
%108 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 36
store i8 0, i8* %108
%109 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
%110 = call i8* @cpystr(i8* %109)
ret i8* %110
}

LLVM IR (-O2):
@.str = [3 x i8] c"%x\00"
define i8* @oauth2_generate_state() {
%1 = alloca [36 x i8]
%2 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 0
store i8 0, i8* %2
%3 = call i32 @strlen(i8* %2)
%4 = sext i32 %3 to i64
%5 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %4
%6 = call i32 (...) @random()
%7 = srem i32 %6, 256
%8 = call i32 @sprintf(i8* %5, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %7)
%9 = call i32 @strlen(i8* %2)
%10 = sext i32 %9 to i64
%11 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %10
%12 = call i32 (...) @random()
%13 = srem i32 %12, 256
%14 = call i32 @sprintf(i8* %11, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %13)
%15 = call i32 @strlen(i8* %2)
%16 = sext i32 %15 to i64
%17 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %16
%18 = call i32 (...) @random()
%19 = srem i32 %18, 256
%20 = call i32 @sprintf(i8* %17, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %19)
%21 = call i32 @strlen(i8* %2)
%22 = sext i32 %21 to i64
%23 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %22
%24 = call i32 (...) @random()
%25 = srem i32 %24, 256
%26 = call i32 @sprintf(i8* %23, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %25)
%27 = call i32 @strlen(i8* %2)
%28 = sext i32 %27 to i64
%29 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %28
store i8 45, i8* %29
%30 = getelementptr i8, i8* %29, i64 1
store i8 0, i8* %30
%31 = call i32 @strlen(i8* %2)
%32 = sext i32 %31 to i64
%33 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %32
%34 = call i32 (...) @random()
%35 = srem i32 %34, 256
%36 = call i32 @sprintf(i8* %33, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %35)
%37 = call i32 @strlen(i8* %2)
%38 = sext i32 %37 to i64
%39 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %38
%40 = call i32 (...) @random()
%41 = srem i32 %40, 256
%42 = call i32 @sprintf(i8* %39, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %41)
%43 = call i32 @strlen(i8* %2)
%44 = sext i32 %43 to i64
%45 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %44
store i8 45, i8* %45
%46 = getelementptr i8, i8* %45, i64 1
store i8 0, i8* %46
%47 = call i32 @strlen(i8* %2)
%48 = sext i32 %47 to i64
%49 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %48
%50 = call i32 (...) @random()
%51 = srem i32 %50, 256
%52 = call i32 @sprintf(i8* %49, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %51)
%53 = call i32 @strlen(i8* %2)
%54 = sext i32 %53 to i64
%55 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %54
%56 = call i32 (...) @random()
%57 = srem i32 %56, 256
%58 = call i32 @sprintf(i8* %55, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %57)
%59 = call i32 @strlen(i8* %2)
%60 = sext i32 %59 to i64
%61 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %60
store i8 45, i8* %61
%62 = getelementptr i8, i8* %61, i64 1
store i8 0, i8* %62
%63 = call i32 @strlen(i8* %2)
%64 = sext i32 %63 to i64
%65 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %64
%66 = call i32 (...) @random()
%67 = srem i32 %66, 256
%68 = call i32 @sprintf(i8* %65, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %67)
%69 = call i32 @strlen(i8* %2)
%70 = sext i32 %69 to i64
%71 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %70
%72 = call i32 (...) @random()
%73 = srem i32 %72, 256
%74 = call i32 @sprintf(i8* %71, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %73)
%75 = call i32 @strlen(i8* %2)
%76 = sext i32 %75 to i64
%77 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %76
store i8 45, i8* %77
%78 = getelementptr i8, i8* %77, i64 1
store i8 0, i8* %78
%79 = call i32 @strlen(i8* %2)
%80 = sext i32 %79 to i64
%81 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %80
%82 = call i32 (...) @random()
%83 = srem i32 %82, 256
%84 = call i32 @sprintf(i8* %81, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %83)
%85 = call i32 @strlen(i8* %2)
%86 = sext i32 %85 to i64
%87 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %86
%88 = call i32 (...) @random()
%89 = srem i32 %88, 256
%90 = call i32 @sprintf(i8* %87, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %89)
%91 = call i32 @strlen(i8* %2)
%92 = sext i32 %91 to i64
%93 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %92
%94 = call i32 (...) @random()
%95 = srem i32 %94, 256
%96 = call i32 @sprintf(i8* %93, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %95)
%97 = call i32 @strlen(i8* %2)
%98 = sext i32 %97 to i64
%99 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %98
%100 = call i32 (...) @random()
%101 = srem i32 %100, 256
%102 = call i32 @sprintf(i8* %99, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %101)
%103 = call i32 @strlen(i8* %2)
%104 = sext i32 %103 to i64
%105 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %104
%106 = call i32 (...) @random()
%107 = srem i32 %106, 256
%108 = call i32 @sprintf(i8* %105, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %107)
%109 = call i32 @strlen(i8* %2)
%110 = sext i32 %109 to i64
%111 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 %110
%112 = call i32 (...) @random()
%113 = srem i32 %112, 256
%114 = call i32 @sprintf(i8* %111, i8* dereferenceable(1) getelementptr inbounds ([3 x i8], [3 x i8]* @.str, i64 0, i64 0), i32 %113)
%115 = getelementptr inbounds [36 x i8], [36 x i8]* %1, i64 0, i64 36
store i8 0, i8* %115
%116 = call i8* @cpystr(i8* %2)
ret i8* %116
}