./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c60fa6dcffe947607e07f04cc37f17d0aae2288e ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 05:30:07,948 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 05:30:07,949 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 05:30:07,957 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 05:30:07,958 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 05:30:07,958 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 05:30:07,959 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 05:30:07,960 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 05:30:07,961 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 05:30:07,962 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 05:30:07,962 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 05:30:07,963 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 05:30:07,963 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 05:30:07,964 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 05:30:07,965 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 05:30:07,965 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 05:30:07,966 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 05:30:07,967 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 05:30:07,968 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 05:30:07,969 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 05:30:07,970 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 05:30:07,971 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 05:30:07,972 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 05:30:07,972 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 05:30:07,972 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 05:30:07,973 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 05:30:07,973 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 05:30:07,974 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 05:30:07,974 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 05:30:07,975 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 05:30:07,975 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 05:30:07,976 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 05:30:07,976 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 05:30:07,976 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 05:30:07,977 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 05:30:07,977 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 05:30:07,977 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 05:30:07,984 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 05:30:07,984 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 05:30:07,985 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 05:30:07,985 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 05:30:07,986 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 05:30:07,986 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 05:30:07,986 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 05:30:07,986 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 05:30:07,986 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 05:30:07,987 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 05:30:07,988 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 05:30:07,988 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 05:30:07,988 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 05:30:07,988 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 05:30:07,988 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 05:30:07,988 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 05:30:07,988 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 05:30:07,989 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 05:30:07,989 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 05:30:07,989 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 05:30:07,989 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 05:30:07,989 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 05:30:07,989 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 05:30:07,989 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c60fa6dcffe947607e07f04cc37f17d0aae2288e [2018-11-23 05:30:08,013 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 05:30:08,023 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 05:30:08,025 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 05:30:08,027 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 05:30:08,027 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 05:30:08,027 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/../../sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-23 05:30:08,072 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/data/ff3e89b9b/3c33d7c887804f26a6636f1ccc67c517/FLAG94d2eaa08 [2018-11-23 05:30:08,477 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 05:30:08,477 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-23 05:30:08,487 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/data/ff3e89b9b/3c33d7c887804f26a6636f1ccc67c517/FLAG94d2eaa08 [2018-11-23 05:30:08,837 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/data/ff3e89b9b/3c33d7c887804f26a6636f1ccc67c517 [2018-11-23 05:30:08,840 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 05:30:08,841 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 05:30:08,842 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 05:30:08,842 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 05:30:08,845 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 05:30:08,846 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 05:30:08" (1/1) ... [2018-11-23 05:30:08,849 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@45f12514 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:08, skipping insertion in model container [2018-11-23 05:30:08,849 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 05:30:08" (1/1) ... [2018-11-23 05:30:08,858 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 05:30:08,900 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 05:30:09,150 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 05:30:09,153 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 05:30:09,221 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 05:30:09,238 INFO L195 MainTranslator]: Completed translation [2018-11-23 05:30:09,239 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09 WrapperNode [2018-11-23 05:30:09,239 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 05:30:09,239 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 05:30:09,240 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 05:30:09,240 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 05:30:09,297 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,309 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,314 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 05:30:09,315 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 05:30:09,315 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 05:30:09,315 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 05:30:09,321 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,322 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,325 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,325 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,341 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,352 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,357 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... [2018-11-23 05:30:09,365 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 05:30:09,365 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 05:30:09,365 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 05:30:09,365 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 05:30:09,367 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 05:30:09,416 INFO L130 BoogieDeclarations]: Found specification of procedure SendSrbSynchronous [2018-11-23 05:30:09,417 INFO L138 BoogieDeclarations]: Found implementation of procedure SendSrbSynchronous [2018-11-23 05:30:09,417 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2018-11-23 05:30:09,417 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2018-11-23 05:30:09,417 INFO L130 BoogieDeclarations]: Found specification of procedure AG_SetStatusAndReturn [2018-11-23 05:30:09,417 INFO L138 BoogieDeclarations]: Found implementation of procedure AG_SetStatusAndReturn [2018-11-23 05:30:09,417 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioStartDevice [2018-11-23 05:30:09,417 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioStartDevice [2018-11-23 05:30:09,417 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 05:30:09,417 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 05:30:09,418 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2018-11-23 05:30:09,418 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2018-11-23 05:30:09,418 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2018-11-23 05:30:09,418 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2018-11-23 05:30:09,418 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioIsPlayActive [2018-11-23 05:30:09,418 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioIsPlayActive [2018-11-23 05:30:09,418 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2018-11-23 05:30:09,418 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2018-11-23 05:30:09,418 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioHPCdrDeviceControl [2018-11-23 05:30:09,419 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioHPCdrDeviceControl [2018-11-23 05:30:09,419 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2018-11-23 05:30:09,419 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2018-11-23 05:30:09,419 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioPower [2018-11-23 05:30:09,419 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioPower [2018-11-23 05:30:09,419 INFO L130 BoogieDeclarations]: Found specification of procedure HPCdrCompletion [2018-11-23 05:30:09,419 INFO L138 BoogieDeclarations]: Found implementation of procedure HPCdrCompletion [2018-11-23 05:30:09,419 INFO L130 BoogieDeclarations]: Found specification of procedure HpCdrProcessLastSession [2018-11-23 05:30:09,419 INFO L138 BoogieDeclarations]: Found implementation of procedure HpCdrProcessLastSession [2018-11-23 05:30:09,419 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2018-11-23 05:30:09,420 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2018-11-23 05:30:09,420 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2018-11-23 05:30:09,420 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2018-11-23 05:30:09,420 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioPnp [2018-11-23 05:30:09,420 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioPnp [2018-11-23 05:30:09,420 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioSignalCompletion [2018-11-23 05:30:09,420 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioSignalCompletion [2018-11-23 05:30:09,420 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2018-11-23 05:30:09,420 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2018-11-23 05:30:09,420 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudio535DeviceControl [2018-11-23 05:30:09,421 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudio535DeviceControl [2018-11-23 05:30:09,421 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2018-11-23 05:30:09,421 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2018-11-23 05:30:09,421 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioSendToNextDriver [2018-11-23 05:30:09,421 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioSendToNextDriver [2018-11-23 05:30:09,421 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 05:30:09,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 05:30:09,421 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioAtapiDeviceControl [2018-11-23 05:30:09,421 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioAtapiDeviceControl [2018-11-23 05:30:09,421 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioDeviceControl [2018-11-23 05:30:09,422 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioDeviceControl [2018-11-23 05:30:09,422 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 05:30:09,422 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 05:30:09,422 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudio435DeviceControl [2018-11-23 05:30:09,422 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudio435DeviceControl [2018-11-23 05:30:09,422 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioUnload [2018-11-23 05:30:09,422 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioUnload [2018-11-23 05:30:09,422 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioForwardIrpSynchronous [2018-11-23 05:30:09,422 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioForwardIrpSynchronous [2018-11-23 05:30:09,422 INFO L130 BoogieDeclarations]: Found specification of procedure ZwClose [2018-11-23 05:30:09,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ZwClose [2018-11-23 05:30:09,733 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:09,733 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:09,822 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:09,823 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:09,909 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:09,909 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:09,982 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:09,982 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:10,047 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:10,047 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:10,188 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:10,189 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:10,226 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:10,226 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:10,241 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:10,241 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:10,374 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 05:30:10,374 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 05:30:10,389 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 05:30:10,389 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 05:30:10,389 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 05:30:10 BoogieIcfgContainer [2018-11-23 05:30:10,389 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 05:30:10,390 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 05:30:10,390 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 05:30:10,392 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 05:30:10,392 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 05:30:08" (1/3) ... [2018-11-23 05:30:10,393 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@493cad3b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 05:30:10, skipping insertion in model container [2018-11-23 05:30:10,393 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 05:30:09" (2/3) ... [2018-11-23 05:30:10,393 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@493cad3b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 05:30:10, skipping insertion in model container [2018-11-23 05:30:10,393 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 05:30:10" (3/3) ... [2018-11-23 05:30:10,395 INFO L112 eAbstractionObserver]: Analyzing ICFG cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-23 05:30:10,401 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 05:30:10,406 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 05:30:10,417 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 05:30:10,440 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 05:30:10,441 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 05:30:10,441 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 05:30:10,441 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 05:30:10,441 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 05:30:10,441 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 05:30:10,441 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 05:30:10,441 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 05:30:10,441 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 05:30:10,462 INFO L276 IsEmpty]: Start isEmpty. Operand 517 states. [2018-11-23 05:30:10,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-23 05:30:10,467 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:10,468 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:10,470 INFO L423 AbstractCegarLoop]: === Iteration 1 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:10,475 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:10,475 INFO L82 PathProgramCache]: Analyzing trace with hash 1098408584, now seen corresponding path program 1 times [2018-11-23 05:30:10,477 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:10,477 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:10,516 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:10,516 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:10,516 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:10,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:10,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:10,659 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:10,660 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:10,662 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:10,670 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:10,671 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:10,672 INFO L87 Difference]: Start difference. First operand 517 states. Second operand 3 states. [2018-11-23 05:30:10,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:10,820 INFO L93 Difference]: Finished difference Result 891 states and 1381 transitions. [2018-11-23 05:30:10,820 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:10,821 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-23 05:30:10,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:10,830 INFO L225 Difference]: With dead ends: 891 [2018-11-23 05:30:10,831 INFO L226 Difference]: Without dead ends: 509 [2018-11-23 05:30:10,835 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:10,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 509 states. [2018-11-23 05:30:10,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 509 to 509. [2018-11-23 05:30:10,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 509 states. [2018-11-23 05:30:10,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 509 states to 509 states and 740 transitions. [2018-11-23 05:30:10,899 INFO L78 Accepts]: Start accepts. Automaton has 509 states and 740 transitions. Word has length 20 [2018-11-23 05:30:10,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:10,899 INFO L480 AbstractCegarLoop]: Abstraction has 509 states and 740 transitions. [2018-11-23 05:30:10,900 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:10,900 INFO L276 IsEmpty]: Start isEmpty. Operand 509 states and 740 transitions. [2018-11-23 05:30:10,901 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-11-23 05:30:10,901 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:10,901 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:10,902 INFO L423 AbstractCegarLoop]: === Iteration 2 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:10,902 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:10,902 INFO L82 PathProgramCache]: Analyzing trace with hash -1051395834, now seen corresponding path program 1 times [2018-11-23 05:30:10,902 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:10,902 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:10,903 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:10,903 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:10,903 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:10,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:11,018 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:11,019 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:11,019 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:11,021 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:11,021 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:11,021 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:11,021 INFO L87 Difference]: Start difference. First operand 509 states and 740 transitions. Second operand 3 states. [2018-11-23 05:30:11,232 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:11,232 INFO L93 Difference]: Finished difference Result 795 states and 1126 transitions. [2018-11-23 05:30:11,233 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:11,233 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2018-11-23 05:30:11,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:11,239 INFO L225 Difference]: With dead ends: 795 [2018-11-23 05:30:11,239 INFO L226 Difference]: Without dead ends: 674 [2018-11-23 05:30:11,240 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 2 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:11,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 674 states. [2018-11-23 05:30:11,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 674 to 654. [2018-11-23 05:30:11,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 654 states. [2018-11-23 05:30:11,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 654 states to 654 states and 934 transitions. [2018-11-23 05:30:11,273 INFO L78 Accepts]: Start accepts. Automaton has 654 states and 934 transitions. Word has length 25 [2018-11-23 05:30:11,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:11,273 INFO L480 AbstractCegarLoop]: Abstraction has 654 states and 934 transitions. [2018-11-23 05:30:11,273 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:11,273 INFO L276 IsEmpty]: Start isEmpty. Operand 654 states and 934 transitions. [2018-11-23 05:30:11,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2018-11-23 05:30:11,275 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:11,275 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:11,275 INFO L423 AbstractCegarLoop]: === Iteration 3 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:11,275 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:11,275 INFO L82 PathProgramCache]: Analyzing trace with hash 880506904, now seen corresponding path program 1 times [2018-11-23 05:30:11,276 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:11,276 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:11,276 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:11,276 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:11,276 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:11,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:11,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:11,336 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:11,336 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:11,336 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:11,336 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:11,336 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:11,336 INFO L87 Difference]: Start difference. First operand 654 states and 934 transitions. Second operand 3 states. [2018-11-23 05:30:11,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:11,387 INFO L93 Difference]: Finished difference Result 1001 states and 1387 transitions. [2018-11-23 05:30:11,388 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:11,388 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 30 [2018-11-23 05:30:11,388 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:11,392 INFO L225 Difference]: With dead ends: 1001 [2018-11-23 05:30:11,392 INFO L226 Difference]: Without dead ends: 823 [2018-11-23 05:30:11,393 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:11,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 823 states. [2018-11-23 05:30:11,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 823 to 769. [2018-11-23 05:30:11,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 769 states. [2018-11-23 05:30:11,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 769 states to 769 states and 1094 transitions. [2018-11-23 05:30:11,428 INFO L78 Accepts]: Start accepts. Automaton has 769 states and 1094 transitions. Word has length 30 [2018-11-23 05:30:11,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:11,428 INFO L480 AbstractCegarLoop]: Abstraction has 769 states and 1094 transitions. [2018-11-23 05:30:11,428 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:11,428 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 1094 transitions. [2018-11-23 05:30:11,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2018-11-23 05:30:11,430 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:11,430 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:11,430 INFO L423 AbstractCegarLoop]: === Iteration 4 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:11,431 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:11,431 INFO L82 PathProgramCache]: Analyzing trace with hash -2133514060, now seen corresponding path program 1 times [2018-11-23 05:30:11,431 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:11,431 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:11,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:11,432 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:11,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:11,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:11,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:11,472 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:11,472 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:11,472 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:11,472 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:11,472 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:11,472 INFO L87 Difference]: Start difference. First operand 769 states and 1094 transitions. Second operand 3 states. [2018-11-23 05:30:11,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:11,648 INFO L93 Difference]: Finished difference Result 1430 states and 2101 transitions. [2018-11-23 05:30:11,648 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:11,648 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 31 [2018-11-23 05:30:11,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:11,652 INFO L225 Difference]: With dead ends: 1430 [2018-11-23 05:30:11,653 INFO L226 Difference]: Without dead ends: 1164 [2018-11-23 05:30:11,653 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:11,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1164 states. [2018-11-23 05:30:11,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1164 to 901. [2018-11-23 05:30:11,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 901 states. [2018-11-23 05:30:11,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 901 states to 901 states and 1326 transitions. [2018-11-23 05:30:11,687 INFO L78 Accepts]: Start accepts. Automaton has 901 states and 1326 transitions. Word has length 31 [2018-11-23 05:30:11,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:11,688 INFO L480 AbstractCegarLoop]: Abstraction has 901 states and 1326 transitions. [2018-11-23 05:30:11,688 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:11,688 INFO L276 IsEmpty]: Start isEmpty. Operand 901 states and 1326 transitions. [2018-11-23 05:30:11,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-23 05:30:11,689 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:11,689 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:11,690 INFO L423 AbstractCegarLoop]: === Iteration 5 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:11,690 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:11,690 INFO L82 PathProgramCache]: Analyzing trace with hash -1952820015, now seen corresponding path program 1 times [2018-11-23 05:30:11,690 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:11,690 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:11,692 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:11,692 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:11,692 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:11,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:11,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:11,754 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:11,754 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:11,754 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:11,755 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:11,755 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:11,755 INFO L87 Difference]: Start difference. First operand 901 states and 1326 transitions. Second operand 5 states. [2018-11-23 05:30:12,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:12,302 INFO L93 Difference]: Finished difference Result 1570 states and 2317 transitions. [2018-11-23 05:30:12,309 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 05:30:12,309 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2018-11-23 05:30:12,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:12,314 INFO L225 Difference]: With dead ends: 1570 [2018-11-23 05:30:12,315 INFO L226 Difference]: Without dead ends: 990 [2018-11-23 05:30:12,316 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2018-11-23 05:30:12,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 990 states. [2018-11-23 05:30:12,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 990 to 889. [2018-11-23 05:30:12,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 889 states. [2018-11-23 05:30:12,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 889 states to 889 states and 1302 transitions. [2018-11-23 05:30:12,361 INFO L78 Accepts]: Start accepts. Automaton has 889 states and 1302 transitions. Word has length 32 [2018-11-23 05:30:12,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:12,361 INFO L480 AbstractCegarLoop]: Abstraction has 889 states and 1302 transitions. [2018-11-23 05:30:12,362 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:12,362 INFO L276 IsEmpty]: Start isEmpty. Operand 889 states and 1302 transitions. [2018-11-23 05:30:12,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2018-11-23 05:30:12,364 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:12,364 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:12,365 INFO L423 AbstractCegarLoop]: === Iteration 6 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:12,365 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:12,365 INFO L82 PathProgramCache]: Analyzing trace with hash -950761943, now seen corresponding path program 1 times [2018-11-23 05:30:12,365 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:12,365 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:12,366 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,367 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:12,367 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:12,417 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:12,417 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:12,417 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:12,418 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:12,418 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:12,418 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:12,418 INFO L87 Difference]: Start difference. First operand 889 states and 1302 transitions. Second operand 3 states. [2018-11-23 05:30:12,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:12,487 INFO L93 Difference]: Finished difference Result 892 states and 1304 transitions. [2018-11-23 05:30:12,487 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:12,487 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2018-11-23 05:30:12,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:12,491 INFO L225 Difference]: With dead ends: 892 [2018-11-23 05:30:12,492 INFO L226 Difference]: Without dead ends: 888 [2018-11-23 05:30:12,492 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:12,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 888 states. [2018-11-23 05:30:12,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 888 to 888. [2018-11-23 05:30:12,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 888 states. [2018-11-23 05:30:12,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 888 states to 888 states and 1299 transitions. [2018-11-23 05:30:12,534 INFO L78 Accepts]: Start accepts. Automaton has 888 states and 1299 transitions. Word has length 36 [2018-11-23 05:30:12,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:12,535 INFO L480 AbstractCegarLoop]: Abstraction has 888 states and 1299 transitions. [2018-11-23 05:30:12,535 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:12,535 INFO L276 IsEmpty]: Start isEmpty. Operand 888 states and 1299 transitions. [2018-11-23 05:30:12,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 05:30:12,536 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:12,536 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:12,536 INFO L423 AbstractCegarLoop]: === Iteration 7 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:12,536 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:12,536 INFO L82 PathProgramCache]: Analyzing trace with hash -826026373, now seen corresponding path program 1 times [2018-11-23 05:30:12,536 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:12,537 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:12,537 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,537 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:12,537 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:12,592 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:12,592 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:12,592 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:12,592 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:12,592 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:12,592 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:12,593 INFO L87 Difference]: Start difference. First operand 888 states and 1299 transitions. Second operand 3 states. [2018-11-23 05:30:12,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:12,653 INFO L93 Difference]: Finished difference Result 1280 states and 1824 transitions. [2018-11-23 05:30:12,653 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:12,654 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 39 [2018-11-23 05:30:12,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:12,658 INFO L225 Difference]: With dead ends: 1280 [2018-11-23 05:30:12,658 INFO L226 Difference]: Without dead ends: 1019 [2018-11-23 05:30:12,659 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:12,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1019 states. [2018-11-23 05:30:12,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1019 to 874. [2018-11-23 05:30:12,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 874 states. [2018-11-23 05:30:12,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 874 states to 874 states and 1241 transitions. [2018-11-23 05:30:12,704 INFO L78 Accepts]: Start accepts. Automaton has 874 states and 1241 transitions. Word has length 39 [2018-11-23 05:30:12,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:12,704 INFO L480 AbstractCegarLoop]: Abstraction has 874 states and 1241 transitions. [2018-11-23 05:30:12,704 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:12,704 INFO L276 IsEmpty]: Start isEmpty. Operand 874 states and 1241 transitions. [2018-11-23 05:30:12,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-23 05:30:12,705 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:12,706 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:12,706 INFO L423 AbstractCegarLoop]: === Iteration 8 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:12,706 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:12,706 INFO L82 PathProgramCache]: Analyzing trace with hash 1085841368, now seen corresponding path program 1 times [2018-11-23 05:30:12,706 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:12,706 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:12,707 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,707 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:12,707 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:12,744 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:12,744 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:12,744 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:12,744 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:12,744 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:12,745 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:12,745 INFO L87 Difference]: Start difference. First operand 874 states and 1241 transitions. Second operand 3 states. [2018-11-23 05:30:12,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:12,808 INFO L93 Difference]: Finished difference Result 976 states and 1369 transitions. [2018-11-23 05:30:12,808 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:12,809 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 40 [2018-11-23 05:30:12,809 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:12,813 INFO L225 Difference]: With dead ends: 976 [2018-11-23 05:30:12,813 INFO L226 Difference]: Without dead ends: 956 [2018-11-23 05:30:12,813 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 5 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:12,815 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 956 states. [2018-11-23 05:30:12,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 956 to 900. [2018-11-23 05:30:12,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 900 states. [2018-11-23 05:30:12,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1276 transitions. [2018-11-23 05:30:12,871 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1276 transitions. Word has length 40 [2018-11-23 05:30:12,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:12,872 INFO L480 AbstractCegarLoop]: Abstraction has 900 states and 1276 transitions. [2018-11-23 05:30:12,872 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:12,872 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1276 transitions. [2018-11-23 05:30:12,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 05:30:12,874 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:12,875 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:12,875 INFO L423 AbstractCegarLoop]: === Iteration 9 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:12,875 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:12,876 INFO L82 PathProgramCache]: Analyzing trace with hash 215600759, now seen corresponding path program 1 times [2018-11-23 05:30:12,876 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:12,876 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:12,877 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,877 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:12,877 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:12,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:12,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:12,927 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:12,927 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:12,927 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:12,927 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:12,927 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:12,928 INFO L87 Difference]: Start difference. First operand 900 states and 1276 transitions. Second operand 3 states. [2018-11-23 05:30:12,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:12,993 INFO L93 Difference]: Finished difference Result 1175 states and 1651 transitions. [2018-11-23 05:30:12,993 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:12,994 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-23 05:30:12,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:12,998 INFO L225 Difference]: With dead ends: 1175 [2018-11-23 05:30:12,999 INFO L226 Difference]: Without dead ends: 933 [2018-11-23 05:30:13,000 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:13,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 933 states. [2018-11-23 05:30:13,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 933 to 900. [2018-11-23 05:30:13,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 900 states. [2018-11-23 05:30:13,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1275 transitions. [2018-11-23 05:30:13,062 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1275 transitions. Word has length 46 [2018-11-23 05:30:13,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:13,063 INFO L480 AbstractCegarLoop]: Abstraction has 900 states and 1275 transitions. [2018-11-23 05:30:13,063 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:13,063 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1275 transitions. [2018-11-23 05:30:13,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 05:30:13,066 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:13,066 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:13,066 INFO L423 AbstractCegarLoop]: === Iteration 10 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:13,066 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:13,066 INFO L82 PathProgramCache]: Analyzing trace with hash -564668473, now seen corresponding path program 1 times [2018-11-23 05:30:13,066 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:13,067 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:13,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,067 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:13,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:13,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:13,113 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:13,113 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 05:30:13,113 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 05:30:13,114 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 05:30:13,114 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 05:30:13,114 INFO L87 Difference]: Start difference. First operand 900 states and 1275 transitions. Second operand 4 states. [2018-11-23 05:30:13,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:13,427 INFO L93 Difference]: Finished difference Result 1022 states and 1421 transitions. [2018-11-23 05:30:13,427 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 05:30:13,428 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 47 [2018-11-23 05:30:13,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:13,431 INFO L225 Difference]: With dead ends: 1022 [2018-11-23 05:30:13,431 INFO L226 Difference]: Without dead ends: 793 [2018-11-23 05:30:13,432 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 05:30:13,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 793 states. [2018-11-23 05:30:13,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 793 to 759. [2018-11-23 05:30:13,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 759 states. [2018-11-23 05:30:13,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 759 states to 759 states and 1068 transitions. [2018-11-23 05:30:13,472 INFO L78 Accepts]: Start accepts. Automaton has 759 states and 1068 transitions. Word has length 47 [2018-11-23 05:30:13,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:13,472 INFO L480 AbstractCegarLoop]: Abstraction has 759 states and 1068 transitions. [2018-11-23 05:30:13,472 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 05:30:13,472 INFO L276 IsEmpty]: Start isEmpty. Operand 759 states and 1068 transitions. [2018-11-23 05:30:13,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 05:30:13,474 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:13,474 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:13,474 INFO L423 AbstractCegarLoop]: === Iteration 11 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:13,474 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:13,474 INFO L82 PathProgramCache]: Analyzing trace with hash -915524998, now seen corresponding path program 1 times [2018-11-23 05:30:13,475 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:13,475 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:13,475 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,475 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:13,475 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:13,509 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:13,509 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:13,509 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:13,509 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:13,510 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:13,510 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:13,510 INFO L87 Difference]: Start difference. First operand 759 states and 1068 transitions. Second operand 3 states. [2018-11-23 05:30:13,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:13,557 INFO L93 Difference]: Finished difference Result 879 states and 1216 transitions. [2018-11-23 05:30:13,557 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:13,558 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2018-11-23 05:30:13,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:13,561 INFO L225 Difference]: With dead ends: 879 [2018-11-23 05:30:13,561 INFO L226 Difference]: Without dead ends: 783 [2018-11-23 05:30:13,562 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:13,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 783 states. [2018-11-23 05:30:13,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 783 to 758. [2018-11-23 05:30:13,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 758 states. [2018-11-23 05:30:13,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 1063 transitions. [2018-11-23 05:30:13,604 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 1063 transitions. Word has length 47 [2018-11-23 05:30:13,604 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:13,604 INFO L480 AbstractCegarLoop]: Abstraction has 758 states and 1063 transitions. [2018-11-23 05:30:13,604 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:13,604 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 1063 transitions. [2018-11-23 05:30:13,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 05:30:13,605 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:13,606 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:13,606 INFO L423 AbstractCegarLoop]: === Iteration 12 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:13,606 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:13,606 INFO L82 PathProgramCache]: Analyzing trace with hash 655679991, now seen corresponding path program 1 times [2018-11-23 05:30:13,606 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:13,606 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:13,610 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,610 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:13,610 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:13,637 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:13,637 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:13,637 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:13,637 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:13,637 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:13,637 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:13,638 INFO L87 Difference]: Start difference. First operand 758 states and 1063 transitions. Second operand 3 states. [2018-11-23 05:30:13,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:13,728 INFO L93 Difference]: Finished difference Result 957 states and 1326 transitions. [2018-11-23 05:30:13,728 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:13,729 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 48 [2018-11-23 05:30:13,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:13,732 INFO L225 Difference]: With dead ends: 957 [2018-11-23 05:30:13,732 INFO L226 Difference]: Without dead ends: 943 [2018-11-23 05:30:13,733 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:13,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 943 states. [2018-11-23 05:30:13,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 943 to 837. [2018-11-23 05:30:13,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 837 states. [2018-11-23 05:30:13,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 837 states to 837 states and 1155 transitions. [2018-11-23 05:30:13,778 INFO L78 Accepts]: Start accepts. Automaton has 837 states and 1155 transitions. Word has length 48 [2018-11-23 05:30:13,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:13,778 INFO L480 AbstractCegarLoop]: Abstraction has 837 states and 1155 transitions. [2018-11-23 05:30:13,778 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:13,778 INFO L276 IsEmpty]: Start isEmpty. Operand 837 states and 1155 transitions. [2018-11-23 05:30:13,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 05:30:13,780 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:13,780 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:13,780 INFO L423 AbstractCegarLoop]: === Iteration 13 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:13,781 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:13,781 INFO L82 PathProgramCache]: Analyzing trace with hash -704891783, now seen corresponding path program 1 times [2018-11-23 05:30:13,781 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:13,781 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:13,781 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,781 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:13,782 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:13,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:13,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:13,844 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:13,844 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 05:30:13,844 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-23 05:30:13,844 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 05:30:13,844 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-23 05:30:13,844 INFO L87 Difference]: Start difference. First operand 837 states and 1155 transitions. Second operand 8 states. [2018-11-23 05:30:13,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:13,986 INFO L93 Difference]: Finished difference Result 863 states and 1189 transitions. [2018-11-23 05:30:13,987 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 05:30:13,987 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 49 [2018-11-23 05:30:13,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:13,990 INFO L225 Difference]: With dead ends: 863 [2018-11-23 05:30:13,990 INFO L226 Difference]: Without dead ends: 859 [2018-11-23 05:30:13,991 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-23 05:30:13,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 859 states. [2018-11-23 05:30:14,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 859 to 856. [2018-11-23 05:30:14,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 856 states. [2018-11-23 05:30:14,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 856 states to 856 states and 1182 transitions. [2018-11-23 05:30:14,041 INFO L78 Accepts]: Start accepts. Automaton has 856 states and 1182 transitions. Word has length 49 [2018-11-23 05:30:14,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:14,041 INFO L480 AbstractCegarLoop]: Abstraction has 856 states and 1182 transitions. [2018-11-23 05:30:14,041 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-23 05:30:14,041 INFO L276 IsEmpty]: Start isEmpty. Operand 856 states and 1182 transitions. [2018-11-23 05:30:14,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 05:30:14,044 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:14,044 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:14,044 INFO L423 AbstractCegarLoop]: === Iteration 14 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:14,045 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:14,045 INFO L82 PathProgramCache]: Analyzing trace with hash -705168613, now seen corresponding path program 1 times [2018-11-23 05:30:14,045 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:14,045 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:14,045 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:14,046 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:14,046 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:14,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:14,108 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:14,109 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:14,109 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 05:30:14,109 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-23 05:30:14,109 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 05:30:14,109 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-23 05:30:14,109 INFO L87 Difference]: Start difference. First operand 856 states and 1182 transitions. Second operand 8 states. [2018-11-23 05:30:14,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:14,199 INFO L93 Difference]: Finished difference Result 898 states and 1234 transitions. [2018-11-23 05:30:14,200 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 05:30:14,200 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 49 [2018-11-23 05:30:14,200 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:14,203 INFO L225 Difference]: With dead ends: 898 [2018-11-23 05:30:14,203 INFO L226 Difference]: Without dead ends: 877 [2018-11-23 05:30:14,204 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-23 05:30:14,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 877 states. [2018-11-23 05:30:14,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 877 to 876. [2018-11-23 05:30:14,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 876 states. [2018-11-23 05:30:14,251 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 876 states to 876 states and 1206 transitions. [2018-11-23 05:30:14,251 INFO L78 Accepts]: Start accepts. Automaton has 876 states and 1206 transitions. Word has length 49 [2018-11-23 05:30:14,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:14,252 INFO L480 AbstractCegarLoop]: Abstraction has 876 states and 1206 transitions. [2018-11-23 05:30:14,252 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-23 05:30:14,252 INFO L276 IsEmpty]: Start isEmpty. Operand 876 states and 1206 transitions. [2018-11-23 05:30:14,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 05:30:14,254 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:14,254 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:14,254 INFO L423 AbstractCegarLoop]: === Iteration 15 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:14,254 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:14,254 INFO L82 PathProgramCache]: Analyzing trace with hash -421895854, now seen corresponding path program 1 times [2018-11-23 05:30:14,254 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:14,255 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:14,255 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:14,255 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:14,255 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:14,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:14,284 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:14,284 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:14,284 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 05:30:14,285 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 05:30:14,285 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 05:30:14,285 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 05:30:14,285 INFO L87 Difference]: Start difference. First operand 876 states and 1206 transitions. Second operand 4 states. [2018-11-23 05:30:14,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:14,341 INFO L93 Difference]: Finished difference Result 901 states and 1231 transitions. [2018-11-23 05:30:14,342 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 05:30:14,342 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 50 [2018-11-23 05:30:14,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:14,346 INFO L225 Difference]: With dead ends: 901 [2018-11-23 05:30:14,346 INFO L226 Difference]: Without dead ends: 879 [2018-11-23 05:30:14,347 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:14,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 879 states. [2018-11-23 05:30:14,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 879 to 876. [2018-11-23 05:30:14,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 876 states. [2018-11-23 05:30:14,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 876 states to 876 states and 1205 transitions. [2018-11-23 05:30:14,398 INFO L78 Accepts]: Start accepts. Automaton has 876 states and 1205 transitions. Word has length 50 [2018-11-23 05:30:14,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:14,398 INFO L480 AbstractCegarLoop]: Abstraction has 876 states and 1205 transitions. [2018-11-23 05:30:14,398 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 05:30:14,398 INFO L276 IsEmpty]: Start isEmpty. Operand 876 states and 1205 transitions. [2018-11-23 05:30:14,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 05:30:14,400 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:14,400 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:14,401 INFO L423 AbstractCegarLoop]: === Iteration 16 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:14,401 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:14,401 INFO L82 PathProgramCache]: Analyzing trace with hash 1878926736, now seen corresponding path program 1 times [2018-11-23 05:30:14,401 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:14,401 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:14,402 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:14,402 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:14,402 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:14,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:14,466 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:14,466 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:14,466 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 05:30:14,466 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 05:30:14,466 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 05:30:14,466 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 05:30:14,467 INFO L87 Difference]: Start difference. First operand 876 states and 1205 transitions. Second operand 7 states. [2018-11-23 05:30:15,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:15,350 INFO L93 Difference]: Finished difference Result 1088 states and 1539 transitions. [2018-11-23 05:30:15,351 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 05:30:15,351 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 50 [2018-11-23 05:30:15,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:15,354 INFO L225 Difference]: With dead ends: 1088 [2018-11-23 05:30:15,354 INFO L226 Difference]: Without dead ends: 997 [2018-11-23 05:30:15,354 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2018-11-23 05:30:15,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 997 states. [2018-11-23 05:30:15,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 997 to 856. [2018-11-23 05:30:15,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 856 states. [2018-11-23 05:30:15,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 856 states to 856 states and 1169 transitions. [2018-11-23 05:30:15,387 INFO L78 Accepts]: Start accepts. Automaton has 856 states and 1169 transitions. Word has length 50 [2018-11-23 05:30:15,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:15,387 INFO L480 AbstractCegarLoop]: Abstraction has 856 states and 1169 transitions. [2018-11-23 05:30:15,387 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 05:30:15,387 INFO L276 IsEmpty]: Start isEmpty. Operand 856 states and 1169 transitions. [2018-11-23 05:30:15,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 05:30:15,389 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:15,389 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:15,389 INFO L423 AbstractCegarLoop]: === Iteration 17 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:15,389 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:15,389 INFO L82 PathProgramCache]: Analyzing trace with hash 2025619538, now seen corresponding path program 1 times [2018-11-23 05:30:15,390 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:15,390 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:15,390 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:15,390 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:15,390 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:15,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:15,408 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:15,408 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:15,408 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:15,409 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:15,409 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:15,409 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:15,409 INFO L87 Difference]: Start difference. First operand 856 states and 1169 transitions. Second operand 3 states. [2018-11-23 05:30:15,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:15,488 INFO L93 Difference]: Finished difference Result 1038 states and 1408 transitions. [2018-11-23 05:30:15,489 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:15,489 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 50 [2018-11-23 05:30:15,489 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:15,491 INFO L225 Difference]: With dead ends: 1038 [2018-11-23 05:30:15,492 INFO L226 Difference]: Without dead ends: 998 [2018-11-23 05:30:15,492 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:15,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 998 states. [2018-11-23 05:30:15,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 998 to 890. [2018-11-23 05:30:15,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 890 states. [2018-11-23 05:30:15,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 890 states to 890 states and 1201 transitions. [2018-11-23 05:30:15,528 INFO L78 Accepts]: Start accepts. Automaton has 890 states and 1201 transitions. Word has length 50 [2018-11-23 05:30:15,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:15,528 INFO L480 AbstractCegarLoop]: Abstraction has 890 states and 1201 transitions. [2018-11-23 05:30:15,528 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:15,528 INFO L276 IsEmpty]: Start isEmpty. Operand 890 states and 1201 transitions. [2018-11-23 05:30:15,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 05:30:15,530 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:15,530 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:15,530 INFO L423 AbstractCegarLoop]: === Iteration 18 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:15,530 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:15,530 INFO L82 PathProgramCache]: Analyzing trace with hash 274322421, now seen corresponding path program 1 times [2018-11-23 05:30:15,530 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:15,530 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:15,531 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:15,531 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:15,531 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:15,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:15,609 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:15,609 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:15,609 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-23 05:30:15,609 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-23 05:30:15,609 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-23 05:30:15,609 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2018-11-23 05:30:15,609 INFO L87 Difference]: Start difference. First operand 890 states and 1201 transitions. Second operand 9 states. [2018-11-23 05:30:16,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:16,907 INFO L93 Difference]: Finished difference Result 1211 states and 1672 transitions. [2018-11-23 05:30:16,908 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-11-23 05:30:16,908 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 50 [2018-11-23 05:30:16,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:16,911 INFO L225 Difference]: With dead ends: 1211 [2018-11-23 05:30:16,911 INFO L226 Difference]: Without dead ends: 1142 [2018-11-23 05:30:16,911 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 3 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=262, Unknown=0, NotChecked=0, Total=342 [2018-11-23 05:30:16,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1142 states. [2018-11-23 05:30:16,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1142 to 902. [2018-11-23 05:30:16,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 902 states. [2018-11-23 05:30:16,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 902 states to 902 states and 1225 transitions. [2018-11-23 05:30:16,948 INFO L78 Accepts]: Start accepts. Automaton has 902 states and 1225 transitions. Word has length 50 [2018-11-23 05:30:16,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:16,948 INFO L480 AbstractCegarLoop]: Abstraction has 902 states and 1225 transitions. [2018-11-23 05:30:16,948 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-23 05:30:16,948 INFO L276 IsEmpty]: Start isEmpty. Operand 902 states and 1225 transitions. [2018-11-23 05:30:16,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 05:30:16,950 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:16,950 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:16,950 INFO L423 AbstractCegarLoop]: === Iteration 19 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:16,951 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:16,951 INFO L82 PathProgramCache]: Analyzing trace with hash -1098118333, now seen corresponding path program 1 times [2018-11-23 05:30:16,951 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:16,951 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:16,952 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:16,952 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:16,952 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:16,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:16,980 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:16,980 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:16,980 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:16,980 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:16,980 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:16,980 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:16,981 INFO L87 Difference]: Start difference. First operand 902 states and 1225 transitions. Second operand 3 states. [2018-11-23 05:30:17,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:17,044 INFO L93 Difference]: Finished difference Result 930 states and 1257 transitions. [2018-11-23 05:30:17,044 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:17,044 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 52 [2018-11-23 05:30:17,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:17,047 INFO L225 Difference]: With dead ends: 930 [2018-11-23 05:30:17,047 INFO L226 Difference]: Without dead ends: 925 [2018-11-23 05:30:17,047 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:17,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 925 states. [2018-11-23 05:30:17,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 925 to 919. [2018-11-23 05:30:17,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 919 states. [2018-11-23 05:30:17,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1246 transitions. [2018-11-23 05:30:17,083 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1246 transitions. Word has length 52 [2018-11-23 05:30:17,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:17,083 INFO L480 AbstractCegarLoop]: Abstraction has 919 states and 1246 transitions. [2018-11-23 05:30:17,083 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:17,083 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1246 transitions. [2018-11-23 05:30:17,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 05:30:17,085 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:17,085 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:17,085 INFO L423 AbstractCegarLoop]: === Iteration 20 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:17,085 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:17,085 INFO L82 PathProgramCache]: Analyzing trace with hash 1807495809, now seen corresponding path program 1 times [2018-11-23 05:30:17,085 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:17,086 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:17,086 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:17,086 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:17,086 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:17,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:17,111 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:17,111 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:17,112 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:17,112 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:17,112 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:17,112 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:17,112 INFO L87 Difference]: Start difference. First operand 919 states and 1246 transitions. Second operand 3 states. [2018-11-23 05:30:17,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:17,171 INFO L93 Difference]: Finished difference Result 1135 states and 1537 transitions. [2018-11-23 05:30:17,171 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:17,171 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 54 [2018-11-23 05:30:17,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:17,174 INFO L225 Difference]: With dead ends: 1135 [2018-11-23 05:30:17,174 INFO L226 Difference]: Without dead ends: 888 [2018-11-23 05:30:17,174 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:17,175 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 888 states. [2018-11-23 05:30:17,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 888 to 888. [2018-11-23 05:30:17,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 888 states. [2018-11-23 05:30:17,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 888 states to 888 states and 1206 transitions. [2018-11-23 05:30:17,209 INFO L78 Accepts]: Start accepts. Automaton has 888 states and 1206 transitions. Word has length 54 [2018-11-23 05:30:17,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:17,209 INFO L480 AbstractCegarLoop]: Abstraction has 888 states and 1206 transitions. [2018-11-23 05:30:17,209 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:17,209 INFO L276 IsEmpty]: Start isEmpty. Operand 888 states and 1206 transitions. [2018-11-23 05:30:17,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 05:30:17,211 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:17,211 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:17,211 INFO L423 AbstractCegarLoop]: === Iteration 21 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:17,211 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:17,212 INFO L82 PathProgramCache]: Analyzing trace with hash 761658191, now seen corresponding path program 1 times [2018-11-23 05:30:17,212 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:17,212 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:17,212 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:17,212 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:17,212 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:17,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:17,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:17,258 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:17,258 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:17,258 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:17,258 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:17,259 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:17,259 INFO L87 Difference]: Start difference. First operand 888 states and 1206 transitions. Second operand 5 states. [2018-11-23 05:30:17,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:17,611 INFO L93 Difference]: Finished difference Result 900 states and 1216 transitions. [2018-11-23 05:30:17,612 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:17,612 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2018-11-23 05:30:17,612 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:17,614 INFO L225 Difference]: With dead ends: 900 [2018-11-23 05:30:17,614 INFO L226 Difference]: Without dead ends: 894 [2018-11-23 05:30:17,615 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 05:30:17,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 894 states. [2018-11-23 05:30:17,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 894 to 888. [2018-11-23 05:30:17,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 888 states. [2018-11-23 05:30:17,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 888 states to 888 states and 1205 transitions. [2018-11-23 05:30:17,652 INFO L78 Accepts]: Start accepts. Automaton has 888 states and 1205 transitions. Word has length 53 [2018-11-23 05:30:17,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:17,653 INFO L480 AbstractCegarLoop]: Abstraction has 888 states and 1205 transitions. [2018-11-23 05:30:17,653 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:17,653 INFO L276 IsEmpty]: Start isEmpty. Operand 888 states and 1205 transitions. [2018-11-23 05:30:17,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 05:30:17,655 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:17,655 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:17,655 INFO L423 AbstractCegarLoop]: === Iteration 22 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:17,655 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:17,655 INFO L82 PathProgramCache]: Analyzing trace with hash -493669766, now seen corresponding path program 1 times [2018-11-23 05:30:17,655 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:17,655 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:17,656 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:17,656 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:17,656 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:17,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:17,692 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:17,693 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:17,693 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:17,693 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:17,693 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:17,693 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:17,693 INFO L87 Difference]: Start difference. First operand 888 states and 1205 transitions. Second operand 5 states. [2018-11-23 05:30:18,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:18,003 INFO L93 Difference]: Finished difference Result 903 states and 1220 transitions. [2018-11-23 05:30:18,005 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:18,005 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2018-11-23 05:30:18,005 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:18,007 INFO L225 Difference]: With dead ends: 903 [2018-11-23 05:30:18,007 INFO L226 Difference]: Without dead ends: 867 [2018-11-23 05:30:18,008 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 05:30:18,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 867 states. [2018-11-23 05:30:18,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 867 to 861. [2018-11-23 05:30:18,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 861 states. [2018-11-23 05:30:18,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1175 transitions. [2018-11-23 05:30:18,044 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1175 transitions. Word has length 52 [2018-11-23 05:30:18,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:18,044 INFO L480 AbstractCegarLoop]: Abstraction has 861 states and 1175 transitions. [2018-11-23 05:30:18,044 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:18,045 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1175 transitions. [2018-11-23 05:30:18,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 05:30:18,046 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:18,046 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:18,046 INFO L423 AbstractCegarLoop]: === Iteration 23 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:18,047 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:18,047 INFO L82 PathProgramCache]: Analyzing trace with hash 1504546088, now seen corresponding path program 1 times [2018-11-23 05:30:18,047 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:18,047 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:18,047 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:18,048 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:18,048 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:18,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:18,089 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:18,090 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:18,090 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:18,090 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:18,090 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:18,090 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:18,091 INFO L87 Difference]: Start difference. First operand 861 states and 1175 transitions. Second operand 5 states. [2018-11-23 05:30:18,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:18,436 INFO L93 Difference]: Finished difference Result 871 states and 1183 transitions. [2018-11-23 05:30:18,436 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:18,436 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2018-11-23 05:30:18,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:18,438 INFO L225 Difference]: With dead ends: 871 [2018-11-23 05:30:18,438 INFO L226 Difference]: Without dead ends: 865 [2018-11-23 05:30:18,439 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 05:30:18,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 865 states. [2018-11-23 05:30:18,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 865 to 861. [2018-11-23 05:30:18,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 861 states. [2018-11-23 05:30:18,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1174 transitions. [2018-11-23 05:30:18,498 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1174 transitions. Word has length 54 [2018-11-23 05:30:18,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:18,498 INFO L480 AbstractCegarLoop]: Abstraction has 861 states and 1174 transitions. [2018-11-23 05:30:18,498 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:18,498 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1174 transitions. [2018-11-23 05:30:18,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 05:30:18,500 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:18,500 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:18,501 INFO L423 AbstractCegarLoop]: === Iteration 24 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:18,501 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:18,501 INFO L82 PathProgramCache]: Analyzing trace with hash -291565544, now seen corresponding path program 1 times [2018-11-23 05:30:18,501 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:18,501 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:18,502 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:18,502 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:18,502 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:18,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:18,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:18,573 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:18,574 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-23 05:30:18,574 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-23 05:30:18,574 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-23 05:30:18,574 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2018-11-23 05:30:18,574 INFO L87 Difference]: Start difference. First operand 861 states and 1174 transitions. Second operand 9 states. [2018-11-23 05:30:18,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:18,775 INFO L93 Difference]: Finished difference Result 888 states and 1204 transitions. [2018-11-23 05:30:18,776 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 05:30:18,776 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 55 [2018-11-23 05:30:18,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:18,780 INFO L225 Difference]: With dead ends: 888 [2018-11-23 05:30:18,781 INFO L226 Difference]: Without dead ends: 852 [2018-11-23 05:30:18,782 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:18,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 852 states. [2018-11-23 05:30:18,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 852 to 852. [2018-11-23 05:30:18,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 852 states. [2018-11-23 05:30:18,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 852 states to 852 states and 1150 transitions. [2018-11-23 05:30:18,837 INFO L78 Accepts]: Start accepts. Automaton has 852 states and 1150 transitions. Word has length 55 [2018-11-23 05:30:18,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:18,837 INFO L480 AbstractCegarLoop]: Abstraction has 852 states and 1150 transitions. [2018-11-23 05:30:18,838 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-23 05:30:18,838 INFO L276 IsEmpty]: Start isEmpty. Operand 852 states and 1150 transitions. [2018-11-23 05:30:18,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 05:30:18,839 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:18,840 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:18,840 INFO L423 AbstractCegarLoop]: === Iteration 25 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:18,840 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:18,840 INFO L82 PathProgramCache]: Analyzing trace with hash 1728183236, now seen corresponding path program 1 times [2018-11-23 05:30:18,840 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:18,840 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:18,841 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:18,841 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:18,841 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:18,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:18,953 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:18,954 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:18,954 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 05:30:18,954 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 05:30:18,954 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 05:30:18,954 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-23 05:30:18,955 INFO L87 Difference]: Start difference. First operand 852 states and 1150 transitions. Second operand 10 states. [2018-11-23 05:30:19,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:19,142 INFO L93 Difference]: Finished difference Result 868 states and 1167 transitions. [2018-11-23 05:30:19,142 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-23 05:30:19,143 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 56 [2018-11-23 05:30:19,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:19,145 INFO L225 Difference]: With dead ends: 868 [2018-11-23 05:30:19,145 INFO L226 Difference]: Without dead ends: 850 [2018-11-23 05:30:19,145 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:19,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 850 states. [2018-11-23 05:30:19,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 850 to 850. [2018-11-23 05:30:19,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 850 states. [2018-11-23 05:30:19,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 850 states to 850 states and 1146 transitions. [2018-11-23 05:30:19,178 INFO L78 Accepts]: Start accepts. Automaton has 850 states and 1146 transitions. Word has length 56 [2018-11-23 05:30:19,178 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:19,179 INFO L480 AbstractCegarLoop]: Abstraction has 850 states and 1146 transitions. [2018-11-23 05:30:19,179 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 05:30:19,179 INFO L276 IsEmpty]: Start isEmpty. Operand 850 states and 1146 transitions. [2018-11-23 05:30:19,180 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 05:30:19,180 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:19,180 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:19,181 INFO L423 AbstractCegarLoop]: === Iteration 26 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:19,181 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:19,181 INFO L82 PathProgramCache]: Analyzing trace with hash -1135140490, now seen corresponding path program 1 times [2018-11-23 05:30:19,181 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:19,181 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:19,181 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,182 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:19,182 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:19,264 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:19,264 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:19,265 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 05:30:19,265 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 05:30:19,265 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 05:30:19,265 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-23 05:30:19,265 INFO L87 Difference]: Start difference. First operand 850 states and 1146 transitions. Second operand 10 states. [2018-11-23 05:30:19,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:19,408 INFO L93 Difference]: Finished difference Result 863 states and 1160 transitions. [2018-11-23 05:30:19,408 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-23 05:30:19,408 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 55 [2018-11-23 05:30:19,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:19,410 INFO L225 Difference]: With dead ends: 863 [2018-11-23 05:30:19,410 INFO L226 Difference]: Without dead ends: 845 [2018-11-23 05:30:19,411 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:19,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 845 states. [2018-11-23 05:30:19,441 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 845 to 845. [2018-11-23 05:30:19,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 845 states. [2018-11-23 05:30:19,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 845 states to 845 states and 1139 transitions. [2018-11-23 05:30:19,442 INFO L78 Accepts]: Start accepts. Automaton has 845 states and 1139 transitions. Word has length 55 [2018-11-23 05:30:19,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:19,443 INFO L480 AbstractCegarLoop]: Abstraction has 845 states and 1139 transitions. [2018-11-23 05:30:19,443 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 05:30:19,443 INFO L276 IsEmpty]: Start isEmpty. Operand 845 states and 1139 transitions. [2018-11-23 05:30:19,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 05:30:19,444 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:19,445 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:19,445 INFO L423 AbstractCegarLoop]: === Iteration 27 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:19,445 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:19,445 INFO L82 PathProgramCache]: Analyzing trace with hash 49569733, now seen corresponding path program 1 times [2018-11-23 05:30:19,445 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:19,445 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:19,446 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,446 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:19,446 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:19,481 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:19,481 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:19,481 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:19,482 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:19,482 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:19,482 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:19,482 INFO L87 Difference]: Start difference. First operand 845 states and 1139 transitions. Second operand 3 states. [2018-11-23 05:30:19,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:19,524 INFO L93 Difference]: Finished difference Result 1098 states and 1473 transitions. [2018-11-23 05:30:19,524 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:19,525 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 74 [2018-11-23 05:30:19,525 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:19,527 INFO L225 Difference]: With dead ends: 1098 [2018-11-23 05:30:19,527 INFO L226 Difference]: Without dead ends: 935 [2018-11-23 05:30:19,527 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:19,528 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 935 states. [2018-11-23 05:30:19,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 935 to 904. [2018-11-23 05:30:19,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 904 states. [2018-11-23 05:30:19,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 904 states to 904 states and 1215 transitions. [2018-11-23 05:30:19,561 INFO L78 Accepts]: Start accepts. Automaton has 904 states and 1215 transitions. Word has length 74 [2018-11-23 05:30:19,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:19,562 INFO L480 AbstractCegarLoop]: Abstraction has 904 states and 1215 transitions. [2018-11-23 05:30:19,562 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:19,562 INFO L276 IsEmpty]: Start isEmpty. Operand 904 states and 1215 transitions. [2018-11-23 05:30:19,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 05:30:19,563 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:19,564 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:19,564 INFO L423 AbstractCegarLoop]: === Iteration 28 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:19,564 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:19,564 INFO L82 PathProgramCache]: Analyzing trace with hash 2094530933, now seen corresponding path program 1 times [2018-11-23 05:30:19,564 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:19,564 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:19,565 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,565 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:19,565 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:19,669 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:19,669 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:19,669 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 05:30:19,669 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 05:30:19,670 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 05:30:19,670 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 05:30:19,670 INFO L87 Difference]: Start difference. First operand 904 states and 1215 transitions. Second operand 12 states. [2018-11-23 05:30:19,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:19,856 INFO L93 Difference]: Finished difference Result 930 states and 1243 transitions. [2018-11-23 05:30:19,857 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 05:30:19,857 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 59 [2018-11-23 05:30:19,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:19,859 INFO L225 Difference]: With dead ends: 930 [2018-11-23 05:30:19,859 INFO L226 Difference]: Without dead ends: 905 [2018-11-23 05:30:19,859 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 05:30:19,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 905 states. [2018-11-23 05:30:19,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 905 to 903. [2018-11-23 05:30:19,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 903 states. [2018-11-23 05:30:19,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 903 states to 903 states and 1204 transitions. [2018-11-23 05:30:19,895 INFO L78 Accepts]: Start accepts. Automaton has 903 states and 1204 transitions. Word has length 59 [2018-11-23 05:30:19,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:19,895 INFO L480 AbstractCegarLoop]: Abstraction has 903 states and 1204 transitions. [2018-11-23 05:30:19,895 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 05:30:19,895 INFO L276 IsEmpty]: Start isEmpty. Operand 903 states and 1204 transitions. [2018-11-23 05:30:19,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 05:30:19,897 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:19,897 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:19,897 INFO L423 AbstractCegarLoop]: === Iteration 29 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:19,897 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:19,897 INFO L82 PathProgramCache]: Analyzing trace with hash 1190823714, now seen corresponding path program 1 times [2018-11-23 05:30:19,897 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:19,897 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:19,898 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,898 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:19,898 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:19,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:20,019 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:20,019 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:20,019 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 05:30:20,019 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 05:30:20,020 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 05:30:20,020 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:20,020 INFO L87 Difference]: Start difference. First operand 903 states and 1204 transitions. Second operand 11 states. [2018-11-23 05:30:20,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:20,182 INFO L93 Difference]: Finished difference Result 920 states and 1222 transitions. [2018-11-23 05:30:20,182 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 05:30:20,183 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 58 [2018-11-23 05:30:20,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:20,185 INFO L225 Difference]: With dead ends: 920 [2018-11-23 05:30:20,185 INFO L226 Difference]: Without dead ends: 900 [2018-11-23 05:30:20,186 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:20,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 900 states. [2018-11-23 05:30:20,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 900 to 900. [2018-11-23 05:30:20,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 900 states. [2018-11-23 05:30:20,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1199 transitions. [2018-11-23 05:30:20,221 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1199 transitions. Word has length 58 [2018-11-23 05:30:20,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:20,221 INFO L480 AbstractCegarLoop]: Abstraction has 900 states and 1199 transitions. [2018-11-23 05:30:20,221 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 05:30:20,221 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1199 transitions. [2018-11-23 05:30:20,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 05:30:20,223 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:20,223 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:20,223 INFO L423 AbstractCegarLoop]: === Iteration 30 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:20,224 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:20,224 INFO L82 PathProgramCache]: Analyzing trace with hash -109492812, now seen corresponding path program 1 times [2018-11-23 05:30:20,224 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:20,224 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:20,224 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:20,224 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:20,224 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:20,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:20,296 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:20,296 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:20,296 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 05:30:20,296 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 05:30:20,296 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 05:30:20,297 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2018-11-23 05:30:20,297 INFO L87 Difference]: Start difference. First operand 900 states and 1199 transitions. Second operand 10 states. [2018-11-23 05:30:20,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:20,474 INFO L93 Difference]: Finished difference Result 967 states and 1274 transitions. [2018-11-23 05:30:20,475 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 05:30:20,475 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 59 [2018-11-23 05:30:20,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:20,477 INFO L225 Difference]: With dead ends: 967 [2018-11-23 05:30:20,477 INFO L226 Difference]: Without dead ends: 858 [2018-11-23 05:30:20,478 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:20,479 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 858 states. [2018-11-23 05:30:20,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 858 to 855. [2018-11-23 05:30:20,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 855 states. [2018-11-23 05:30:20,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 855 states to 855 states and 1118 transitions. [2018-11-23 05:30:20,534 INFO L78 Accepts]: Start accepts. Automaton has 855 states and 1118 transitions. Word has length 59 [2018-11-23 05:30:20,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:20,534 INFO L480 AbstractCegarLoop]: Abstraction has 855 states and 1118 transitions. [2018-11-23 05:30:20,534 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 05:30:20,534 INFO L276 IsEmpty]: Start isEmpty. Operand 855 states and 1118 transitions. [2018-11-23 05:30:20,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-23 05:30:20,536 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:20,536 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:20,536 INFO L423 AbstractCegarLoop]: === Iteration 31 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:20,536 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:20,537 INFO L82 PathProgramCache]: Analyzing trace with hash 2110252174, now seen corresponding path program 1 times [2018-11-23 05:30:20,537 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:20,537 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:20,537 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:20,537 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:20,537 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:20,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:20,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:20,576 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:20,576 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 05:30:20,576 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 05:30:20,576 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 05:30:20,576 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 05:30:20,577 INFO L87 Difference]: Start difference. First operand 855 states and 1118 transitions. Second operand 4 states. [2018-11-23 05:30:20,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:20,721 INFO L93 Difference]: Finished difference Result 1012 states and 1336 transitions. [2018-11-23 05:30:20,722 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 05:30:20,722 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 60 [2018-11-23 05:30:20,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:20,725 INFO L225 Difference]: With dead ends: 1012 [2018-11-23 05:30:20,726 INFO L226 Difference]: Without dead ends: 904 [2018-11-23 05:30:20,726 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:20,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 904 states. [2018-11-23 05:30:20,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 904 to 862. [2018-11-23 05:30:20,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 862 states. [2018-11-23 05:30:20,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 862 states and 1133 transitions. [2018-11-23 05:30:20,784 INFO L78 Accepts]: Start accepts. Automaton has 862 states and 1133 transitions. Word has length 60 [2018-11-23 05:30:20,784 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:20,784 INFO L480 AbstractCegarLoop]: Abstraction has 862 states and 1133 transitions. [2018-11-23 05:30:20,784 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 05:30:20,784 INFO L276 IsEmpty]: Start isEmpty. Operand 862 states and 1133 transitions. [2018-11-23 05:30:20,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-23 05:30:20,788 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:20,788 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:20,788 INFO L423 AbstractCegarLoop]: === Iteration 32 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:20,788 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:20,789 INFO L82 PathProgramCache]: Analyzing trace with hash -1909955508, now seen corresponding path program 1 times [2018-11-23 05:30:20,789 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:20,789 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:20,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:20,789 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:20,790 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:20,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:20,868 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:20,868 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:20,868 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 05:30:20,869 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 05:30:20,869 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 05:30:20,869 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:20,869 INFO L87 Difference]: Start difference. First operand 862 states and 1133 transitions. Second operand 11 states. [2018-11-23 05:30:20,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:20,966 INFO L93 Difference]: Finished difference Result 931 states and 1224 transitions. [2018-11-23 05:30:20,967 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 05:30:20,967 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 60 [2018-11-23 05:30:20,967 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:20,969 INFO L225 Difference]: With dead ends: 931 [2018-11-23 05:30:20,970 INFO L226 Difference]: Without dead ends: 876 [2018-11-23 05:30:20,970 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:20,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 876 states. [2018-11-23 05:30:21,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 876 to 866. [2018-11-23 05:30:21,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 866 states. [2018-11-23 05:30:21,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 866 states to 866 states and 1150 transitions. [2018-11-23 05:30:21,004 INFO L78 Accepts]: Start accepts. Automaton has 866 states and 1150 transitions. Word has length 60 [2018-11-23 05:30:21,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:21,005 INFO L480 AbstractCegarLoop]: Abstraction has 866 states and 1150 transitions. [2018-11-23 05:30:21,005 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 05:30:21,005 INFO L276 IsEmpty]: Start isEmpty. Operand 866 states and 1150 transitions. [2018-11-23 05:30:21,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2018-11-23 05:30:21,007 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:21,007 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:21,007 INFO L423 AbstractCegarLoop]: === Iteration 33 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:21,007 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:21,007 INFO L82 PathProgramCache]: Analyzing trace with hash 1731506415, now seen corresponding path program 1 times [2018-11-23 05:30:21,008 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:21,008 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:21,008 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:21,008 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:21,008 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:21,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:21,076 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:21,076 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:21,076 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:21,076 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:21,076 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:21,077 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:21,077 INFO L87 Difference]: Start difference. First operand 866 states and 1150 transitions. Second operand 5 states. [2018-11-23 05:30:21,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:21,234 INFO L93 Difference]: Finished difference Result 901 states and 1192 transitions. [2018-11-23 05:30:21,235 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:21,235 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 62 [2018-11-23 05:30:21,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:21,239 INFO L225 Difference]: With dead ends: 901 [2018-11-23 05:30:21,239 INFO L226 Difference]: Without dead ends: 873 [2018-11-23 05:30:21,240 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 05:30:21,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 873 states. [2018-11-23 05:30:21,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 873 to 871. [2018-11-23 05:30:21,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 871 states. [2018-11-23 05:30:21,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 871 states to 871 states and 1159 transitions. [2018-11-23 05:30:21,314 INFO L78 Accepts]: Start accepts. Automaton has 871 states and 1159 transitions. Word has length 62 [2018-11-23 05:30:21,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:21,315 INFO L480 AbstractCegarLoop]: Abstraction has 871 states and 1159 transitions. [2018-11-23 05:30:21,315 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:21,315 INFO L276 IsEmpty]: Start isEmpty. Operand 871 states and 1159 transitions. [2018-11-23 05:30:21,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 05:30:21,317 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:21,317 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:21,317 INFO L423 AbstractCegarLoop]: === Iteration 34 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:21,317 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:21,317 INFO L82 PathProgramCache]: Analyzing trace with hash 1988119945, now seen corresponding path program 1 times [2018-11-23 05:30:21,317 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:21,318 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:21,318 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:21,318 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:21,318 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:21,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:21,428 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:21,429 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:21,429 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 05:30:21,429 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 05:30:21,429 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 05:30:21,429 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 05:30:21,430 INFO L87 Difference]: Start difference. First operand 871 states and 1159 transitions. Second operand 12 states. [2018-11-23 05:30:21,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:21,661 INFO L93 Difference]: Finished difference Result 893 states and 1182 transitions. [2018-11-23 05:30:21,661 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 05:30:21,661 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 63 [2018-11-23 05:30:21,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:21,663 INFO L225 Difference]: With dead ends: 893 [2018-11-23 05:30:21,663 INFO L226 Difference]: Without dead ends: 869 [2018-11-23 05:30:21,664 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 05:30:21,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 869 states. [2018-11-23 05:30:21,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 869 to 869. [2018-11-23 05:30:21,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 869 states. [2018-11-23 05:30:21,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 869 states to 869 states and 1154 transitions. [2018-11-23 05:30:21,721 INFO L78 Accepts]: Start accepts. Automaton has 869 states and 1154 transitions. Word has length 63 [2018-11-23 05:30:21,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:21,721 INFO L480 AbstractCegarLoop]: Abstraction has 869 states and 1154 transitions. [2018-11-23 05:30:21,721 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 05:30:21,721 INFO L276 IsEmpty]: Start isEmpty. Operand 869 states and 1154 transitions. [2018-11-23 05:30:21,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 05:30:21,723 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:21,723 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:21,723 INFO L423 AbstractCegarLoop]: === Iteration 35 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:21,723 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:21,724 INFO L82 PathProgramCache]: Analyzing trace with hash 360839567, now seen corresponding path program 1 times [2018-11-23 05:30:21,724 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:21,724 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:21,724 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:21,724 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:21,724 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:21,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:21,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:21,843 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:21,843 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 05:30:21,843 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 05:30:21,844 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 05:30:21,844 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 05:30:21,844 INFO L87 Difference]: Start difference. First operand 869 states and 1154 transitions. Second operand 12 states. [2018-11-23 05:30:22,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:22,090 INFO L93 Difference]: Finished difference Result 893 states and 1179 transitions. [2018-11-23 05:30:22,090 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 05:30:22,091 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 67 [2018-11-23 05:30:22,091 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:22,093 INFO L225 Difference]: With dead ends: 893 [2018-11-23 05:30:22,093 INFO L226 Difference]: Without dead ends: 869 [2018-11-23 05:30:22,094 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 05:30:22,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 869 states. [2018-11-23 05:30:22,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 869 to 867. [2018-11-23 05:30:22,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 867 states. [2018-11-23 05:30:22,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 867 states to 867 states and 1150 transitions. [2018-11-23 05:30:22,146 INFO L78 Accepts]: Start accepts. Automaton has 867 states and 1150 transitions. Word has length 67 [2018-11-23 05:30:22,146 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:22,146 INFO L480 AbstractCegarLoop]: Abstraction has 867 states and 1150 transitions. [2018-11-23 05:30:22,146 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 05:30:22,146 INFO L276 IsEmpty]: Start isEmpty. Operand 867 states and 1150 transitions. [2018-11-23 05:30:22,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2018-11-23 05:30:22,148 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:22,148 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:22,148 INFO L423 AbstractCegarLoop]: === Iteration 36 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:22,148 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:22,149 INFO L82 PathProgramCache]: Analyzing trace with hash -1861861007, now seen corresponding path program 1 times [2018-11-23 05:30:22,149 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:22,149 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:22,149 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,149 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:22,149 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:22,226 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:22,226 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:22,226 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 05:30:22,226 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 05:30:22,226 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 05:30:22,226 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 05:30:22,227 INFO L87 Difference]: Start difference. First operand 867 states and 1150 transitions. Second operand 12 states. [2018-11-23 05:30:22,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:22,357 INFO L93 Difference]: Finished difference Result 891 states and 1175 transitions. [2018-11-23 05:30:22,358 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 05:30:22,358 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 62 [2018-11-23 05:30:22,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:22,360 INFO L225 Difference]: With dead ends: 891 [2018-11-23 05:30:22,360 INFO L226 Difference]: Without dead ends: 867 [2018-11-23 05:30:22,361 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 05:30:22,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 867 states. [2018-11-23 05:30:22,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 867 to 865. [2018-11-23 05:30:22,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 865 states. [2018-11-23 05:30:22,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 865 states to 865 states and 1146 transitions. [2018-11-23 05:30:22,393 INFO L78 Accepts]: Start accepts. Automaton has 865 states and 1146 transitions. Word has length 62 [2018-11-23 05:30:22,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:22,393 INFO L480 AbstractCegarLoop]: Abstraction has 865 states and 1146 transitions. [2018-11-23 05:30:22,393 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 05:30:22,393 INFO L276 IsEmpty]: Start isEmpty. Operand 865 states and 1146 transitions. [2018-11-23 05:30:22,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2018-11-23 05:30:22,395 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:22,395 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:22,395 INFO L423 AbstractCegarLoop]: === Iteration 37 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:22,395 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:22,395 INFO L82 PathProgramCache]: Analyzing trace with hash 2111220271, now seen corresponding path program 1 times [2018-11-23 05:30:22,395 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:22,395 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:22,396 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,396 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:22,396 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:22,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:22,420 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:22,420 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:22,420 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:22,420 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:22,420 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:22,421 INFO L87 Difference]: Start difference. First operand 865 states and 1146 transitions. Second operand 3 states. [2018-11-23 05:30:22,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:22,449 INFO L93 Difference]: Finished difference Result 1137 states and 1501 transitions. [2018-11-23 05:30:22,450 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:22,450 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 62 [2018-11-23 05:30:22,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:22,451 INFO L225 Difference]: With dead ends: 1137 [2018-11-23 05:30:22,452 INFO L226 Difference]: Without dead ends: 793 [2018-11-23 05:30:22,453 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:22,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 793 states. [2018-11-23 05:30:22,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 793 to 762. [2018-11-23 05:30:22,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 762 states. [2018-11-23 05:30:22,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 762 states to 762 states and 977 transitions. [2018-11-23 05:30:22,482 INFO L78 Accepts]: Start accepts. Automaton has 762 states and 977 transitions. Word has length 62 [2018-11-23 05:30:22,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:22,482 INFO L480 AbstractCegarLoop]: Abstraction has 762 states and 977 transitions. [2018-11-23 05:30:22,482 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:22,483 INFO L276 IsEmpty]: Start isEmpty. Operand 762 states and 977 transitions. [2018-11-23 05:30:22,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 05:30:22,484 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:22,484 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:22,484 INFO L423 AbstractCegarLoop]: === Iteration 38 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:22,484 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:22,484 INFO L82 PathProgramCache]: Analyzing trace with hash -1839036840, now seen corresponding path program 1 times [2018-11-23 05:30:22,484 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:22,485 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:22,485 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,485 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:22,485 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:22,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:22,581 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:22,581 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 05:30:22,581 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 05:30:22,582 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 05:30:22,582 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:22,582 INFO L87 Difference]: Start difference. First operand 762 states and 977 transitions. Second operand 13 states. [2018-11-23 05:30:22,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:22,748 INFO L93 Difference]: Finished difference Result 779 states and 995 transitions. [2018-11-23 05:30:22,749 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 05:30:22,749 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 63 [2018-11-23 05:30:22,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:22,751 INFO L225 Difference]: With dead ends: 779 [2018-11-23 05:30:22,751 INFO L226 Difference]: Without dead ends: 757 [2018-11-23 05:30:22,752 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 05:30:22,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 757 states. [2018-11-23 05:30:22,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 757 to 757. [2018-11-23 05:30:22,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 757 states. [2018-11-23 05:30:22,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 757 states to 757 states and 970 transitions. [2018-11-23 05:30:22,780 INFO L78 Accepts]: Start accepts. Automaton has 757 states and 970 transitions. Word has length 63 [2018-11-23 05:30:22,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:22,780 INFO L480 AbstractCegarLoop]: Abstraction has 757 states and 970 transitions. [2018-11-23 05:30:22,780 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 05:30:22,780 INFO L276 IsEmpty]: Start isEmpty. Operand 757 states and 970 transitions. [2018-11-23 05:30:22,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 05:30:22,782 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:22,782 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:22,782 INFO L423 AbstractCegarLoop]: === Iteration 39 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:22,782 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:22,782 INFO L82 PathProgramCache]: Analyzing trace with hash 1496662402, now seen corresponding path program 1 times [2018-11-23 05:30:22,782 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:22,783 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:22,783 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,783 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:22,783 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:22,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:22,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:22,906 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:22,906 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 05:30:22,906 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 05:30:22,906 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 05:30:22,906 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:22,906 INFO L87 Difference]: Start difference. First operand 757 states and 970 transitions. Second operand 13 states. [2018-11-23 05:30:23,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:23,076 INFO L93 Difference]: Finished difference Result 774 states and 988 transitions. [2018-11-23 05:30:23,077 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 05:30:23,077 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 69 [2018-11-23 05:30:23,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:23,079 INFO L225 Difference]: With dead ends: 774 [2018-11-23 05:30:23,079 INFO L226 Difference]: Without dead ends: 746 [2018-11-23 05:30:23,080 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 05:30:23,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 746 states. [2018-11-23 05:30:23,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 746 to 746. [2018-11-23 05:30:23,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 746 states. [2018-11-23 05:30:23,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 955 transitions. [2018-11-23 05:30:23,131 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 955 transitions. Word has length 69 [2018-11-23 05:30:23,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:23,131 INFO L480 AbstractCegarLoop]: Abstraction has 746 states and 955 transitions. [2018-11-23 05:30:23,131 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 05:30:23,131 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 955 transitions. [2018-11-23 05:30:23,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2018-11-23 05:30:23,133 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:23,133 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:23,133 INFO L423 AbstractCegarLoop]: === Iteration 40 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:23,133 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:23,133 INFO L82 PathProgramCache]: Analyzing trace with hash 81838798, now seen corresponding path program 1 times [2018-11-23 05:30:23,133 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:23,133 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:23,134 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:23,134 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:23,134 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:23,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:23,302 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:23,302 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:23,303 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 05:30:23,303 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 05:30:23,303 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 05:30:23,303 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:23,303 INFO L87 Difference]: Start difference. First operand 746 states and 955 transitions. Second operand 13 states. [2018-11-23 05:30:23,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:23,478 INFO L93 Difference]: Finished difference Result 763 states and 973 transitions. [2018-11-23 05:30:23,478 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 05:30:23,478 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 62 [2018-11-23 05:30:23,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:23,479 INFO L225 Difference]: With dead ends: 763 [2018-11-23 05:30:23,479 INFO L226 Difference]: Without dead ends: 738 [2018-11-23 05:30:23,480 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 05:30:23,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2018-11-23 05:30:23,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 738. [2018-11-23 05:30:23,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 738 states. [2018-11-23 05:30:23,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 945 transitions. [2018-11-23 05:30:23,511 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 945 transitions. Word has length 62 [2018-11-23 05:30:23,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:23,511 INFO L480 AbstractCegarLoop]: Abstraction has 738 states and 945 transitions. [2018-11-23 05:30:23,511 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 05:30:23,511 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 945 transitions. [2018-11-23 05:30:23,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 05:30:23,512 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:23,512 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:23,512 INFO L423 AbstractCegarLoop]: === Iteration 41 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:23,512 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:23,512 INFO L82 PathProgramCache]: Analyzing trace with hash -2087229698, now seen corresponding path program 1 times [2018-11-23 05:30:23,512 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:23,512 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:23,512 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:23,513 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:23,513 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:23,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:23,553 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:23,553 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:23,553 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:23,554 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:23,554 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:23,554 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:23,554 INFO L87 Difference]: Start difference. First operand 738 states and 945 transitions. Second operand 3 states. [2018-11-23 05:30:23,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:23,599 INFO L93 Difference]: Finished difference Result 868 states and 1118 transitions. [2018-11-23 05:30:23,600 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:23,600 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 66 [2018-11-23 05:30:23,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:23,602 INFO L225 Difference]: With dead ends: 868 [2018-11-23 05:30:23,602 INFO L226 Difference]: Without dead ends: 738 [2018-11-23 05:30:23,603 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:23,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2018-11-23 05:30:23,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 738. [2018-11-23 05:30:23,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 738 states. [2018-11-23 05:30:23,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 943 transitions. [2018-11-23 05:30:23,648 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 943 transitions. Word has length 66 [2018-11-23 05:30:23,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:23,648 INFO L480 AbstractCegarLoop]: Abstraction has 738 states and 943 transitions. [2018-11-23 05:30:23,648 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:23,648 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 943 transitions. [2018-11-23 05:30:23,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 05:30:23,649 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:23,649 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:23,650 INFO L423 AbstractCegarLoop]: === Iteration 42 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:23,650 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:23,650 INFO L82 PathProgramCache]: Analyzing trace with hash 398574068, now seen corresponding path program 1 times [2018-11-23 05:30:23,650 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:23,650 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:23,651 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:23,651 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:23,651 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:23,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:23,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:23,796 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:23,796 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 05:30:23,796 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 05:30:23,797 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 05:30:23,797 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 05:30:23,797 INFO L87 Difference]: Start difference. First operand 738 states and 943 transitions. Second operand 12 states. [2018-11-23 05:30:24,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:24,031 INFO L93 Difference]: Finished difference Result 760 states and 966 transitions. [2018-11-23 05:30:24,031 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 05:30:24,031 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 66 [2018-11-23 05:30:24,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:24,032 INFO L225 Difference]: With dead ends: 760 [2018-11-23 05:30:24,033 INFO L226 Difference]: Without dead ends: 736 [2018-11-23 05:30:24,033 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 05:30:24,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 736 states. [2018-11-23 05:30:24,080 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 736 to 731. [2018-11-23 05:30:24,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 731 states. [2018-11-23 05:30:24,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 731 states to 731 states and 931 transitions. [2018-11-23 05:30:24,081 INFO L78 Accepts]: Start accepts. Automaton has 731 states and 931 transitions. Word has length 66 [2018-11-23 05:30:24,081 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:24,081 INFO L480 AbstractCegarLoop]: Abstraction has 731 states and 931 transitions. [2018-11-23 05:30:24,082 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 05:30:24,082 INFO L276 IsEmpty]: Start isEmpty. Operand 731 states and 931 transitions. [2018-11-23 05:30:24,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 05:30:24,082 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:24,083 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:24,083 INFO L423 AbstractCegarLoop]: === Iteration 43 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:24,083 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:24,083 INFO L82 PathProgramCache]: Analyzing trace with hash -322329126, now seen corresponding path program 1 times [2018-11-23 05:30:24,083 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:24,083 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:24,084 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,084 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:24,084 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:24,152 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:24,153 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:24,153 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:24,153 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:24,153 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:24,153 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:24,153 INFO L87 Difference]: Start difference. First operand 731 states and 931 transitions. Second operand 5 states. [2018-11-23 05:30:24,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:24,230 INFO L93 Difference]: Finished difference Result 777 states and 978 transitions. [2018-11-23 05:30:24,231 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:24,231 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 65 [2018-11-23 05:30:24,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:24,233 INFO L225 Difference]: With dead ends: 777 [2018-11-23 05:30:24,233 INFO L226 Difference]: Without dead ends: 725 [2018-11-23 05:30:24,233 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:24,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 725 states. [2018-11-23 05:30:24,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 725 to 725. [2018-11-23 05:30:24,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 725 states. [2018-11-23 05:30:24,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 725 states to 725 states and 921 transitions. [2018-11-23 05:30:24,280 INFO L78 Accepts]: Start accepts. Automaton has 725 states and 921 transitions. Word has length 65 [2018-11-23 05:30:24,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:24,280 INFO L480 AbstractCegarLoop]: Abstraction has 725 states and 921 transitions. [2018-11-23 05:30:24,280 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:24,280 INFO L276 IsEmpty]: Start isEmpty. Operand 725 states and 921 transitions. [2018-11-23 05:30:24,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 05:30:24,281 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:24,281 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:24,281 INFO L423 AbstractCegarLoop]: === Iteration 44 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:24,282 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:24,282 INFO L82 PathProgramCache]: Analyzing trace with hash 1568772173, now seen corresponding path program 1 times [2018-11-23 05:30:24,282 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:24,282 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:24,282 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,282 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:24,282 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:24,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:24,321 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:24,321 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:24,321 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:24,321 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:24,321 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:24,321 INFO L87 Difference]: Start difference. First operand 725 states and 921 transitions. Second operand 5 states. [2018-11-23 05:30:24,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:24,397 INFO L93 Difference]: Finished difference Result 759 states and 956 transitions. [2018-11-23 05:30:24,398 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:24,398 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 67 [2018-11-23 05:30:24,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:24,400 INFO L225 Difference]: With dead ends: 759 [2018-11-23 05:30:24,400 INFO L226 Difference]: Without dead ends: 720 [2018-11-23 05:30:24,401 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:24,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 720 states. [2018-11-23 05:30:24,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 720 to 720. [2018-11-23 05:30:24,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 720 states. [2018-11-23 05:30:24,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 720 states to 720 states and 914 transitions. [2018-11-23 05:30:24,447 INFO L78 Accepts]: Start accepts. Automaton has 720 states and 914 transitions. Word has length 67 [2018-11-23 05:30:24,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:24,447 INFO L480 AbstractCegarLoop]: Abstraction has 720 states and 914 transitions. [2018-11-23 05:30:24,447 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:24,447 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 914 transitions. [2018-11-23 05:30:24,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 05:30:24,449 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:24,449 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:24,449 INFO L423 AbstractCegarLoop]: === Iteration 45 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:24,449 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:24,449 INFO L82 PathProgramCache]: Analyzing trace with hash -1402336471, now seen corresponding path program 1 times [2018-11-23 05:30:24,449 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:24,449 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:24,450 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,450 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:24,450 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:24,495 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:24,496 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:24,496 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:24,496 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:24,496 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:24,496 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:24,496 INFO L87 Difference]: Start difference. First operand 720 states and 914 transitions. Second operand 5 states. [2018-11-23 05:30:24,889 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:24,889 INFO L93 Difference]: Finished difference Result 803 states and 1021 transitions. [2018-11-23 05:30:24,889 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:24,889 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 68 [2018-11-23 05:30:24,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:24,891 INFO L225 Difference]: With dead ends: 803 [2018-11-23 05:30:24,891 INFO L226 Difference]: Without dead ends: 794 [2018-11-23 05:30:24,891 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 05:30:24,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 794 states. [2018-11-23 05:30:24,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 794 to 720. [2018-11-23 05:30:24,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 720 states. [2018-11-23 05:30:24,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 720 states to 720 states and 912 transitions. [2018-11-23 05:30:24,923 INFO L78 Accepts]: Start accepts. Automaton has 720 states and 912 transitions. Word has length 68 [2018-11-23 05:30:24,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:24,924 INFO L480 AbstractCegarLoop]: Abstraction has 720 states and 912 transitions. [2018-11-23 05:30:24,924 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:24,924 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 912 transitions. [2018-11-23 05:30:24,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 05:30:24,924 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:24,925 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:24,925 INFO L423 AbstractCegarLoop]: === Iteration 46 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:24,925 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:24,925 INFO L82 PathProgramCache]: Analyzing trace with hash 1734361953, now seen corresponding path program 1 times [2018-11-23 05:30:24,925 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:24,925 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:24,925 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,925 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:24,926 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:24,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:24,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:24,999 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:25,000 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 05:30:25,001 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 05:30:25,001 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 05:30:25,002 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 05:30:25,002 INFO L87 Difference]: Start difference. First operand 720 states and 912 transitions. Second operand 7 states. [2018-11-23 05:30:25,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:25,103 INFO L93 Difference]: Finished difference Result 766 states and 962 transitions. [2018-11-23 05:30:25,104 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 05:30:25,104 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 74 [2018-11-23 05:30:25,104 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:25,105 INFO L225 Difference]: With dead ends: 766 [2018-11-23 05:30:25,106 INFO L226 Difference]: Without dead ends: 726 [2018-11-23 05:30:25,106 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-11-23 05:30:25,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 726 states. [2018-11-23 05:30:25,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 726 to 724. [2018-11-23 05:30:25,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 724 states. [2018-11-23 05:30:25,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 724 states to 724 states and 916 transitions. [2018-11-23 05:30:25,135 INFO L78 Accepts]: Start accepts. Automaton has 724 states and 916 transitions. Word has length 74 [2018-11-23 05:30:25,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:25,135 INFO L480 AbstractCegarLoop]: Abstraction has 724 states and 916 transitions. [2018-11-23 05:30:25,135 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 05:30:25,135 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 916 transitions. [2018-11-23 05:30:25,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2018-11-23 05:30:25,136 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:25,136 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:25,137 INFO L423 AbstractCegarLoop]: === Iteration 47 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:25,137 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:25,137 INFO L82 PathProgramCache]: Analyzing trace with hash 127484813, now seen corresponding path program 1 times [2018-11-23 05:30:25,137 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:25,137 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:25,138 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:25,138 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:25,138 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:25,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:25,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:25,261 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:25,261 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 05:30:25,261 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 05:30:25,261 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 05:30:25,261 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 05:30:25,261 INFO L87 Difference]: Start difference. First operand 724 states and 916 transitions. Second operand 12 states. [2018-11-23 05:30:25,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:25,416 INFO L93 Difference]: Finished difference Result 747 states and 940 transitions. [2018-11-23 05:30:25,417 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 05:30:25,417 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 70 [2018-11-23 05:30:25,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:25,418 INFO L225 Difference]: With dead ends: 747 [2018-11-23 05:30:25,418 INFO L226 Difference]: Without dead ends: 724 [2018-11-23 05:30:25,419 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2018-11-23 05:30:25,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 724 states. [2018-11-23 05:30:25,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 724 to 724. [2018-11-23 05:30:25,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 724 states. [2018-11-23 05:30:25,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 724 states to 724 states and 915 transitions. [2018-11-23 05:30:25,448 INFO L78 Accepts]: Start accepts. Automaton has 724 states and 915 transitions. Word has length 70 [2018-11-23 05:30:25,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:25,449 INFO L480 AbstractCegarLoop]: Abstraction has 724 states and 915 transitions. [2018-11-23 05:30:25,449 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 05:30:25,449 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 915 transitions. [2018-11-23 05:30:25,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2018-11-23 05:30:25,449 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:25,449 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:25,450 INFO L423 AbstractCegarLoop]: === Iteration 48 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:25,450 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:25,450 INFO L82 PathProgramCache]: Analyzing trace with hash 829084687, now seen corresponding path program 1 times [2018-11-23 05:30:25,450 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:25,450 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:25,450 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:25,450 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:25,450 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:25,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:25,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:25,570 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:25,570 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 05:30:25,570 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 05:30:25,570 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 05:30:25,571 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 05:30:25,571 INFO L87 Difference]: Start difference. First operand 724 states and 915 transitions. Second operand 14 states. [2018-11-23 05:30:25,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:25,823 INFO L93 Difference]: Finished difference Result 748 states and 941 transitions. [2018-11-23 05:30:25,824 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 05:30:25,825 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 70 [2018-11-23 05:30:25,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:25,827 INFO L225 Difference]: With dead ends: 748 [2018-11-23 05:30:25,827 INFO L226 Difference]: Without dead ends: 720 [2018-11-23 05:30:25,827 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 05:30:25,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 720 states. [2018-11-23 05:30:25,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 720 to 720. [2018-11-23 05:30:25,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 720 states. [2018-11-23 05:30:25,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 720 states to 720 states and 909 transitions. [2018-11-23 05:30:25,876 INFO L78 Accepts]: Start accepts. Automaton has 720 states and 909 transitions. Word has length 70 [2018-11-23 05:30:25,876 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:25,876 INFO L480 AbstractCegarLoop]: Abstraction has 720 states and 909 transitions. [2018-11-23 05:30:25,876 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 05:30:25,876 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 909 transitions. [2018-11-23 05:30:25,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 05:30:25,877 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:25,878 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:25,878 INFO L423 AbstractCegarLoop]: === Iteration 49 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:25,878 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:25,878 INFO L82 PathProgramCache]: Analyzing trace with hash 77291112, now seen corresponding path program 1 times [2018-11-23 05:30:25,878 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:25,878 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:25,879 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:25,879 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:25,879 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:25,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:25,933 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:25,934 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:25,934 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:25,934 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:25,934 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:25,934 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:25,934 INFO L87 Difference]: Start difference. First operand 720 states and 909 transitions. Second operand 5 states. [2018-11-23 05:30:25,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:25,974 INFO L93 Difference]: Finished difference Result 754 states and 944 transitions. [2018-11-23 05:30:25,974 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:25,975 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 69 [2018-11-23 05:30:25,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:25,976 INFO L225 Difference]: With dead ends: 754 [2018-11-23 05:30:25,976 INFO L226 Difference]: Without dead ends: 715 [2018-11-23 05:30:25,976 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:25,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 715 states. [2018-11-23 05:30:26,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 715 to 715. [2018-11-23 05:30:26,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 715 states. [2018-11-23 05:30:26,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 715 states to 715 states and 902 transitions. [2018-11-23 05:30:26,027 INFO L78 Accepts]: Start accepts. Automaton has 715 states and 902 transitions. Word has length 69 [2018-11-23 05:30:26,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:26,027 INFO L480 AbstractCegarLoop]: Abstraction has 715 states and 902 transitions. [2018-11-23 05:30:26,027 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:26,027 INFO L276 IsEmpty]: Start isEmpty. Operand 715 states and 902 transitions. [2018-11-23 05:30:26,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 05:30:26,029 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:26,029 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:26,029 INFO L423 AbstractCegarLoop]: === Iteration 50 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:26,029 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:26,029 INFO L82 PathProgramCache]: Analyzing trace with hash 1952246579, now seen corresponding path program 1 times [2018-11-23 05:30:26,029 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:26,029 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:26,030 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,030 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:26,030 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:26,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:26,145 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:26,145 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 05:30:26,145 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 05:30:26,146 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 05:30:26,146 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:26,146 INFO L87 Difference]: Start difference. First operand 715 states and 902 transitions. Second operand 11 states. [2018-11-23 05:30:26,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:26,241 INFO L93 Difference]: Finished difference Result 742 states and 932 transitions. [2018-11-23 05:30:26,241 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 05:30:26,241 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 69 [2018-11-23 05:30:26,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:26,243 INFO L225 Difference]: With dead ends: 742 [2018-11-23 05:30:26,243 INFO L226 Difference]: Without dead ends: 712 [2018-11-23 05:30:26,244 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:26,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 712 states. [2018-11-23 05:30:26,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 712 to 712. [2018-11-23 05:30:26,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 712 states. [2018-11-23 05:30:26,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 712 states to 712 states and 897 transitions. [2018-11-23 05:30:26,302 INFO L78 Accepts]: Start accepts. Automaton has 712 states and 897 transitions. Word has length 69 [2018-11-23 05:30:26,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:26,304 INFO L480 AbstractCegarLoop]: Abstraction has 712 states and 897 transitions. [2018-11-23 05:30:26,304 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 05:30:26,305 INFO L276 IsEmpty]: Start isEmpty. Operand 712 states and 897 transitions. [2018-11-23 05:30:26,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 05:30:26,306 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:26,306 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:26,306 INFO L423 AbstractCegarLoop]: === Iteration 51 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:26,307 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:26,307 INFO L82 PathProgramCache]: Analyzing trace with hash -1163083894, now seen corresponding path program 1 times [2018-11-23 05:30:26,307 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:26,307 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:26,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,308 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:26,308 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:26,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:26,400 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:26,400 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 05:30:26,400 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 05:30:26,400 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 05:30:26,400 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:26,402 INFO L87 Difference]: Start difference. First operand 712 states and 897 transitions. Second operand 11 states. [2018-11-23 05:30:26,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:26,556 INFO L93 Difference]: Finished difference Result 722 states and 906 transitions. [2018-11-23 05:30:26,556 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 05:30:26,556 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 69 [2018-11-23 05:30:26,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:26,558 INFO L225 Difference]: With dead ends: 722 [2018-11-23 05:30:26,558 INFO L226 Difference]: Without dead ends: 716 [2018-11-23 05:30:26,558 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:26,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 716 states. [2018-11-23 05:30:26,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 716 to 709. [2018-11-23 05:30:26,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 709 states. [2018-11-23 05:30:26,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 709 states to 709 states and 890 transitions. [2018-11-23 05:30:26,605 INFO L78 Accepts]: Start accepts. Automaton has 709 states and 890 transitions. Word has length 69 [2018-11-23 05:30:26,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:26,605 INFO L480 AbstractCegarLoop]: Abstraction has 709 states and 890 transitions. [2018-11-23 05:30:26,605 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 05:30:26,605 INFO L276 IsEmpty]: Start isEmpty. Operand 709 states and 890 transitions. [2018-11-23 05:30:26,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 05:30:26,609 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:26,610 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:26,610 INFO L423 AbstractCegarLoop]: === Iteration 52 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:26,610 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:26,610 INFO L82 PathProgramCache]: Analyzing trace with hash -1163360724, now seen corresponding path program 1 times [2018-11-23 05:30:26,610 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:26,610 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:26,611 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,611 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:26,611 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:26,663 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:26,663 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:26,663 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:26,664 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:26,664 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:26,664 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:26,664 INFO L87 Difference]: Start difference. First operand 709 states and 890 transitions. Second operand 5 states. [2018-11-23 05:30:26,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:26,922 INFO L93 Difference]: Finished difference Result 786 states and 991 transitions. [2018-11-23 05:30:26,923 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:26,923 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 69 [2018-11-23 05:30:26,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:26,924 INFO L225 Difference]: With dead ends: 786 [2018-11-23 05:30:26,924 INFO L226 Difference]: Without dead ends: 751 [2018-11-23 05:30:26,924 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 05:30:26,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 751 states. [2018-11-23 05:30:26,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 751 to 680. [2018-11-23 05:30:26,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 680 states. [2018-11-23 05:30:26,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 680 states to 680 states and 854 transitions. [2018-11-23 05:30:26,954 INFO L78 Accepts]: Start accepts. Automaton has 680 states and 854 transitions. Word has length 69 [2018-11-23 05:30:26,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:26,954 INFO L480 AbstractCegarLoop]: Abstraction has 680 states and 854 transitions. [2018-11-23 05:30:26,954 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:26,955 INFO L276 IsEmpty]: Start isEmpty. Operand 680 states and 854 transitions. [2018-11-23 05:30:26,955 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 05:30:26,955 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:26,955 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:26,955 INFO L423 AbstractCegarLoop]: === Iteration 53 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:26,956 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:26,956 INFO L82 PathProgramCache]: Analyzing trace with hash -1070160589, now seen corresponding path program 1 times [2018-11-23 05:30:26,956 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:26,956 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:26,956 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,956 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:26,956 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:26,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:26,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:26,996 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:26,996 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 05:30:26,997 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 05:30:26,997 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 05:30:26,997 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:26,997 INFO L87 Difference]: Start difference. First operand 680 states and 854 transitions. Second operand 3 states. [2018-11-23 05:30:27,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:27,031 INFO L93 Difference]: Finished difference Result 706 states and 884 transitions. [2018-11-23 05:30:27,032 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 05:30:27,032 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 69 [2018-11-23 05:30:27,032 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:27,033 INFO L225 Difference]: With dead ends: 706 [2018-11-23 05:30:27,033 INFO L226 Difference]: Without dead ends: 666 [2018-11-23 05:30:27,034 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 05:30:27,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2018-11-23 05:30:27,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 662. [2018-11-23 05:30:27,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 662 states. [2018-11-23 05:30:27,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 662 states to 662 states and 829 transitions. [2018-11-23 05:30:27,063 INFO L78 Accepts]: Start accepts. Automaton has 662 states and 829 transitions. Word has length 69 [2018-11-23 05:30:27,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:27,063 INFO L480 AbstractCegarLoop]: Abstraction has 662 states and 829 transitions. [2018-11-23 05:30:27,063 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 05:30:27,064 INFO L276 IsEmpty]: Start isEmpty. Operand 662 states and 829 transitions. [2018-11-23 05:30:27,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 05:30:27,065 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:27,065 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:27,065 INFO L423 AbstractCegarLoop]: === Iteration 54 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:27,065 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:27,065 INFO L82 PathProgramCache]: Analyzing trace with hash -81188571, now seen corresponding path program 1 times [2018-11-23 05:30:27,065 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:27,065 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:27,066 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,066 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:27,066 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:27,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:27,167 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:27,167 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 05:30:27,167 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 05:30:27,168 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 05:30:27,168 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 05:30:27,168 INFO L87 Difference]: Start difference. First operand 662 states and 829 transitions. Second operand 14 states. [2018-11-23 05:30:27,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:27,310 INFO L93 Difference]: Finished difference Result 726 states and 897 transitions. [2018-11-23 05:30:27,310 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 05:30:27,310 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 71 [2018-11-23 05:30:27,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:27,311 INFO L225 Difference]: With dead ends: 726 [2018-11-23 05:30:27,311 INFO L226 Difference]: Without dead ends: 656 [2018-11-23 05:30:27,311 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 05:30:27,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 656 states. [2018-11-23 05:30:27,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 656 to 656. [2018-11-23 05:30:27,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 656 states. [2018-11-23 05:30:27,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 656 states to 656 states and 820 transitions. [2018-11-23 05:30:27,337 INFO L78 Accepts]: Start accepts. Automaton has 656 states and 820 transitions. Word has length 71 [2018-11-23 05:30:27,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:27,338 INFO L480 AbstractCegarLoop]: Abstraction has 656 states and 820 transitions. [2018-11-23 05:30:27,338 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 05:30:27,338 INFO L276 IsEmpty]: Start isEmpty. Operand 656 states and 820 transitions. [2018-11-23 05:30:27,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 05:30:27,338 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:27,339 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:27,339 INFO L423 AbstractCegarLoop]: === Iteration 55 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:27,339 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:27,339 INFO L82 PathProgramCache]: Analyzing trace with hash -37760830, now seen corresponding path program 1 times [2018-11-23 05:30:27,339 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:27,339 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:27,340 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,340 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:27,340 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:27,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:27,379 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:27,379 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:27,379 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:27,379 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:27,380 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:27,380 INFO L87 Difference]: Start difference. First operand 656 states and 820 transitions. Second operand 5 states. [2018-11-23 05:30:27,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:27,441 INFO L93 Difference]: Finished difference Result 703 states and 869 transitions. [2018-11-23 05:30:27,442 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:27,443 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2018-11-23 05:30:27,443 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:27,444 INFO L225 Difference]: With dead ends: 703 [2018-11-23 05:30:27,444 INFO L226 Difference]: Without dead ends: 660 [2018-11-23 05:30:27,445 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:27,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2018-11-23 05:30:27,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 656. [2018-11-23 05:30:27,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 656 states. [2018-11-23 05:30:27,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 656 states to 656 states and 819 transitions. [2018-11-23 05:30:27,488 INFO L78 Accepts]: Start accepts. Automaton has 656 states and 819 transitions. Word has length 71 [2018-11-23 05:30:27,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:27,488 INFO L480 AbstractCegarLoop]: Abstraction has 656 states and 819 transitions. [2018-11-23 05:30:27,488 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:27,488 INFO L276 IsEmpty]: Start isEmpty. Operand 656 states and 819 transitions. [2018-11-23 05:30:27,489 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 05:30:27,489 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:27,491 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:27,492 INFO L423 AbstractCegarLoop]: === Iteration 56 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:27,492 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:27,492 INFO L82 PathProgramCache]: Analyzing trace with hash 2013223168, now seen corresponding path program 1 times [2018-11-23 05:30:27,492 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:27,492 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:27,493 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,493 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:27,493 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:27,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:27,613 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:27,613 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 05:30:27,613 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 05:30:27,613 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 05:30:27,613 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 05:30:27,613 INFO L87 Difference]: Start difference. First operand 656 states and 819 transitions. Second operand 14 states. [2018-11-23 05:30:27,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:27,767 INFO L93 Difference]: Finished difference Result 680 states and 845 transitions. [2018-11-23 05:30:27,769 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 05:30:27,769 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 71 [2018-11-23 05:30:27,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:27,770 INFO L225 Difference]: With dead ends: 680 [2018-11-23 05:30:27,771 INFO L226 Difference]: Without dead ends: 649 [2018-11-23 05:30:27,771 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 05:30:27,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 649 states. [2018-11-23 05:30:27,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 649 to 649. [2018-11-23 05:30:27,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 649 states. [2018-11-23 05:30:27,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 649 states to 649 states and 809 transitions. [2018-11-23 05:30:27,801 INFO L78 Accepts]: Start accepts. Automaton has 649 states and 809 transitions. Word has length 71 [2018-11-23 05:30:27,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:27,801 INFO L480 AbstractCegarLoop]: Abstraction has 649 states and 809 transitions. [2018-11-23 05:30:27,801 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 05:30:27,801 INFO L276 IsEmpty]: Start isEmpty. Operand 649 states and 809 transitions. [2018-11-23 05:30:27,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-11-23 05:30:27,802 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:27,802 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:27,802 INFO L423 AbstractCegarLoop]: === Iteration 57 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:27,803 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:27,803 INFO L82 PathProgramCache]: Analyzing trace with hash -1067828418, now seen corresponding path program 1 times [2018-11-23 05:30:27,803 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:27,803 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:27,803 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,803 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:27,803 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:27,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:27,867 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:27,867 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 05:30:27,867 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 05:30:27,867 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 05:30:27,867 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 05:30:27,867 INFO L87 Difference]: Start difference. First operand 649 states and 809 transitions. Second operand 7 states. [2018-11-23 05:30:27,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:27,949 INFO L93 Difference]: Finished difference Result 703 states and 870 transitions. [2018-11-23 05:30:27,949 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 05:30:27,949 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 77 [2018-11-23 05:30:27,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:27,950 INFO L225 Difference]: With dead ends: 703 [2018-11-23 05:30:27,950 INFO L226 Difference]: Without dead ends: 647 [2018-11-23 05:30:27,951 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-11-23 05:30:27,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2018-11-23 05:30:27,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 643. [2018-11-23 05:30:27,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 643 states. [2018-11-23 05:30:27,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 643 states to 643 states and 799 transitions. [2018-11-23 05:30:27,976 INFO L78 Accepts]: Start accepts. Automaton has 643 states and 799 transitions. Word has length 77 [2018-11-23 05:30:27,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:27,976 INFO L480 AbstractCegarLoop]: Abstraction has 643 states and 799 transitions. [2018-11-23 05:30:27,976 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 05:30:27,976 INFO L276 IsEmpty]: Start isEmpty. Operand 643 states and 799 transitions. [2018-11-23 05:30:27,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-11-23 05:30:27,977 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:27,977 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:27,978 INFO L423 AbstractCegarLoop]: === Iteration 58 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:27,978 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:27,978 INFO L82 PathProgramCache]: Analyzing trace with hash -366228544, now seen corresponding path program 1 times [2018-11-23 05:30:27,978 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:27,978 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:27,979 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,979 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:27,979 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:27,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:28,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:28,065 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:28,065 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 05:30:28,066 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 05:30:28,066 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 05:30:28,066 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 05:30:28,066 INFO L87 Difference]: Start difference. First operand 643 states and 799 transitions. Second operand 14 states. [2018-11-23 05:30:28,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:28,180 INFO L93 Difference]: Finished difference Result 669 states and 827 transitions. [2018-11-23 05:30:28,180 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 05:30:28,180 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 77 [2018-11-23 05:30:28,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:28,181 INFO L225 Difference]: With dead ends: 669 [2018-11-23 05:30:28,181 INFO L226 Difference]: Without dead ends: 645 [2018-11-23 05:30:28,182 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 05:30:28,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 645 states. [2018-11-23 05:30:28,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 645 to 641. [2018-11-23 05:30:28,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 641 states. [2018-11-23 05:30:28,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 795 transitions. [2018-11-23 05:30:28,207 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 795 transitions. Word has length 77 [2018-11-23 05:30:28,207 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:28,207 INFO L480 AbstractCegarLoop]: Abstraction has 641 states and 795 transitions. [2018-11-23 05:30:28,207 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 05:30:28,207 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 795 transitions. [2018-11-23 05:30:28,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 05:30:28,208 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:28,208 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:28,208 INFO L423 AbstractCegarLoop]: === Iteration 59 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:28,208 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:28,208 INFO L82 PathProgramCache]: Analyzing trace with hash -615466654, now seen corresponding path program 1 times [2018-11-23 05:30:28,208 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:28,208 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:28,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,209 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:28,209 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:28,283 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:28,283 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:28,283 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 05:30:28,283 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 05:30:28,283 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 05:30:28,283 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 05:30:28,284 INFO L87 Difference]: Start difference. First operand 641 states and 795 transitions. Second operand 14 states. [2018-11-23 05:30:28,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:28,404 INFO L93 Difference]: Finished difference Result 700 states and 857 transitions. [2018-11-23 05:30:28,405 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 05:30:28,405 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 72 [2018-11-23 05:30:28,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:28,406 INFO L225 Difference]: With dead ends: 700 [2018-11-23 05:30:28,406 INFO L226 Difference]: Without dead ends: 629 [2018-11-23 05:30:28,407 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 05:30:28,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 629 states. [2018-11-23 05:30:28,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 629 to 629. [2018-11-23 05:30:28,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 629 states. [2018-11-23 05:30:28,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 629 states to 629 states and 776 transitions. [2018-11-23 05:30:28,433 INFO L78 Accepts]: Start accepts. Automaton has 629 states and 776 transitions. Word has length 72 [2018-11-23 05:30:28,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:28,434 INFO L480 AbstractCegarLoop]: Abstraction has 629 states and 776 transitions. [2018-11-23 05:30:28,434 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 05:30:28,434 INFO L276 IsEmpty]: Start isEmpty. Operand 629 states and 776 transitions. [2018-11-23 05:30:28,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 05:30:28,434 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:28,434 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:28,434 INFO L423 AbstractCegarLoop]: === Iteration 60 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:28,435 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:28,435 INFO L82 PathProgramCache]: Analyzing trace with hash -2025859791, now seen corresponding path program 1 times [2018-11-23 05:30:28,435 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:28,435 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:28,435 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,435 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:28,435 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:28,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:28,488 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:28,488 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 05:30:28,488 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 05:30:28,488 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 05:30:28,488 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 05:30:28,488 INFO L87 Difference]: Start difference. First operand 629 states and 776 transitions. Second operand 11 states. [2018-11-23 05:30:28,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:28,563 INFO L93 Difference]: Finished difference Result 820 states and 1003 transitions. [2018-11-23 05:30:28,563 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 05:30:28,563 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 71 [2018-11-23 05:30:28,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:28,564 INFO L225 Difference]: With dead ends: 820 [2018-11-23 05:30:28,564 INFO L226 Difference]: Without dead ends: 671 [2018-11-23 05:30:28,565 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:28,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 671 states. [2018-11-23 05:30:28,598 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 671 to 635. [2018-11-23 05:30:28,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 635 states. [2018-11-23 05:30:28,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 635 states to 635 states and 778 transitions. [2018-11-23 05:30:28,599 INFO L78 Accepts]: Start accepts. Automaton has 635 states and 778 transitions. Word has length 71 [2018-11-23 05:30:28,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:28,600 INFO L480 AbstractCegarLoop]: Abstraction has 635 states and 778 transitions. [2018-11-23 05:30:28,600 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 05:30:28,600 INFO L276 IsEmpty]: Start isEmpty. Operand 635 states and 778 transitions. [2018-11-23 05:30:28,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 05:30:28,600 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:28,601 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:28,601 INFO L423 AbstractCegarLoop]: === Iteration 61 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:28,601 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:28,601 INFO L82 PathProgramCache]: Analyzing trace with hash -1859005469, now seen corresponding path program 1 times [2018-11-23 05:30:28,601 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:28,601 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:28,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,602 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:28,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:28,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:28,693 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:28,693 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 05:30:28,694 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 05:30:28,694 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 05:30:28,694 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 05:30:28,694 INFO L87 Difference]: Start difference. First operand 635 states and 778 transitions. Second operand 14 states. [2018-11-23 05:30:28,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:28,801 INFO L93 Difference]: Finished difference Result 657 states and 801 transitions. [2018-11-23 05:30:28,801 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 05:30:28,801 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 74 [2018-11-23 05:30:28,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:28,803 INFO L225 Difference]: With dead ends: 657 [2018-11-23 05:30:28,803 INFO L226 Difference]: Without dead ends: 625 [2018-11-23 05:30:28,803 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 05:30:28,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 625 states. [2018-11-23 05:30:28,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 625 to 625. [2018-11-23 05:30:28,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 625 states. [2018-11-23 05:30:28,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 625 states to 625 states and 763 transitions. [2018-11-23 05:30:28,829 INFO L78 Accepts]: Start accepts. Automaton has 625 states and 763 transitions. Word has length 74 [2018-11-23 05:30:28,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:28,829 INFO L480 AbstractCegarLoop]: Abstraction has 625 states and 763 transitions. [2018-11-23 05:30:28,829 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 05:30:28,829 INFO L276 IsEmpty]: Start isEmpty. Operand 625 states and 763 transitions. [2018-11-23 05:30:28,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 05:30:28,830 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:28,830 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:28,830 INFO L423 AbstractCegarLoop]: === Iteration 62 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:28,831 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:28,831 INFO L82 PathProgramCache]: Analyzing trace with hash -1771854681, now seen corresponding path program 1 times [2018-11-23 05:30:28,831 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:28,831 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:28,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,831 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:28,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:28,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:28,934 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:28,934 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:28,934 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 05:30:28,934 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 05:30:28,934 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 05:30:28,934 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:28,934 INFO L87 Difference]: Start difference. First operand 625 states and 763 transitions. Second operand 13 states. [2018-11-23 05:30:29,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:29,068 INFO L93 Difference]: Finished difference Result 645 states and 784 transitions. [2018-11-23 05:30:29,068 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 05:30:29,068 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 79 [2018-11-23 05:30:29,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:29,069 INFO L225 Difference]: With dead ends: 645 [2018-11-23 05:30:29,069 INFO L226 Difference]: Without dead ends: 620 [2018-11-23 05:30:29,070 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 05:30:29,070 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 620 states. [2018-11-23 05:30:29,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 620 to 620. [2018-11-23 05:30:29,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 620 states. [2018-11-23 05:30:29,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 620 states to 620 states and 755 transitions. [2018-11-23 05:30:29,094 INFO L78 Accepts]: Start accepts. Automaton has 620 states and 755 transitions. Word has length 79 [2018-11-23 05:30:29,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:29,094 INFO L480 AbstractCegarLoop]: Abstraction has 620 states and 755 transitions. [2018-11-23 05:30:29,094 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 05:30:29,094 INFO L276 IsEmpty]: Start isEmpty. Operand 620 states and 755 transitions. [2018-11-23 05:30:29,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 05:30:29,095 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:29,095 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:29,095 INFO L423 AbstractCegarLoop]: === Iteration 63 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:29,095 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:29,095 INFO L82 PathProgramCache]: Analyzing trace with hash -253233342, now seen corresponding path program 1 times [2018-11-23 05:30:29,095 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:29,095 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:29,095 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:29,096 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:29,096 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:29,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:29,194 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:29,194 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:29,194 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 05:30:29,195 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 05:30:29,195 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 05:30:29,195 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 05:30:29,195 INFO L87 Difference]: Start difference. First operand 620 states and 755 transitions. Second operand 13 states. [2018-11-23 05:30:29,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:29,320 INFO L93 Difference]: Finished difference Result 622 states and 756 transitions. [2018-11-23 05:30:29,321 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 05:30:29,321 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 72 [2018-11-23 05:30:29,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:29,321 INFO L225 Difference]: With dead ends: 622 [2018-11-23 05:30:29,321 INFO L226 Difference]: Without dead ends: 571 [2018-11-23 05:30:29,322 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 05:30:29,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 571 states. [2018-11-23 05:30:29,343 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 571 to 571. [2018-11-23 05:30:29,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 571 states. [2018-11-23 05:30:29,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 571 states to 571 states and 701 transitions. [2018-11-23 05:30:29,344 INFO L78 Accepts]: Start accepts. Automaton has 571 states and 701 transitions. Word has length 72 [2018-11-23 05:30:29,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:29,344 INFO L480 AbstractCegarLoop]: Abstraction has 571 states and 701 transitions. [2018-11-23 05:30:29,344 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 05:30:29,344 INFO L276 IsEmpty]: Start isEmpty. Operand 571 states and 701 transitions. [2018-11-23 05:30:29,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 05:30:29,344 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:29,345 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:29,345 INFO L423 AbstractCegarLoop]: === Iteration 64 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:29,345 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:29,345 INFO L82 PathProgramCache]: Analyzing trace with hash 1632556457, now seen corresponding path program 1 times [2018-11-23 05:30:29,345 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:29,345 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:29,345 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:29,345 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:29,345 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:29,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:29,413 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:29,413 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:29,413 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 05:30:29,413 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 05:30:29,413 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 05:30:29,413 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-23 05:30:29,414 INFO L87 Difference]: Start difference. First operand 571 states and 701 transitions. Second operand 10 states. [2018-11-23 05:30:30,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:30,210 INFO L93 Difference]: Finished difference Result 1187 states and 1450 transitions. [2018-11-23 05:30:30,210 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-11-23 05:30:30,210 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 73 [2018-11-23 05:30:30,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:30,212 INFO L225 Difference]: With dead ends: 1187 [2018-11-23 05:30:30,212 INFO L226 Difference]: Without dead ends: 1040 [2018-11-23 05:30:30,213 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=85, Invalid=335, Unknown=0, NotChecked=0, Total=420 [2018-11-23 05:30:30,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1040 states. [2018-11-23 05:30:30,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1040 to 905. [2018-11-23 05:30:30,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 905 states. [2018-11-23 05:30:30,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 905 states to 905 states and 1131 transitions. [2018-11-23 05:30:30,260 INFO L78 Accepts]: Start accepts. Automaton has 905 states and 1131 transitions. Word has length 73 [2018-11-23 05:30:30,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:30,261 INFO L480 AbstractCegarLoop]: Abstraction has 905 states and 1131 transitions. [2018-11-23 05:30:30,261 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 05:30:30,261 INFO L276 IsEmpty]: Start isEmpty. Operand 905 states and 1131 transitions. [2018-11-23 05:30:30,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 05:30:30,263 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:30,263 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:30,263 INFO L423 AbstractCegarLoop]: === Iteration 65 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:30,263 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:30,263 INFO L82 PathProgramCache]: Analyzing trace with hash -1983138585, now seen corresponding path program 1 times [2018-11-23 05:30:30,263 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:30,263 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:30,264 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:30,264 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:30,264 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:30,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:30,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:30,301 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:30,301 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 05:30:30,301 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 05:30:30,301 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 05:30:30,302 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-23 05:30:30,302 INFO L87 Difference]: Start difference. First operand 905 states and 1131 transitions. Second operand 6 states. [2018-11-23 05:30:30,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:30,734 INFO L93 Difference]: Finished difference Result 1185 states and 1442 transitions. [2018-11-23 05:30:30,736 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 05:30:30,736 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 73 [2018-11-23 05:30:30,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:30,738 INFO L225 Difference]: With dead ends: 1185 [2018-11-23 05:30:30,738 INFO L226 Difference]: Without dead ends: 1055 [2018-11-23 05:30:30,738 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 05:30:30,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1055 states. [2018-11-23 05:30:30,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1055 to 994. [2018-11-23 05:30:30,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 994 states. [2018-11-23 05:30:30,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 994 states to 994 states and 1235 transitions. [2018-11-23 05:30:30,782 INFO L78 Accepts]: Start accepts. Automaton has 994 states and 1235 transitions. Word has length 73 [2018-11-23 05:30:30,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:30,782 INFO L480 AbstractCegarLoop]: Abstraction has 994 states and 1235 transitions. [2018-11-23 05:30:30,782 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 05:30:30,782 INFO L276 IsEmpty]: Start isEmpty. Operand 994 states and 1235 transitions. [2018-11-23 05:30:30,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 05:30:30,783 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:30,783 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:30,784 INFO L423 AbstractCegarLoop]: === Iteration 66 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:30,784 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:30,784 INFO L82 PathProgramCache]: Analyzing trace with hash -1013991573, now seen corresponding path program 1 times [2018-11-23 05:30:30,784 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:30,784 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:30,784 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:30,784 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:30,784 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:30,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 05:30:30,813 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 05:30:30,814 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 05:30:30,814 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 05:30:30,814 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 05:30:30,814 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 05:30:30,814 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:30,814 INFO L87 Difference]: Start difference. First operand 994 states and 1235 transitions. Second operand 5 states. [2018-11-23 05:30:30,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 05:30:30,874 INFO L93 Difference]: Finished difference Result 1039 states and 1283 transitions. [2018-11-23 05:30:30,875 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 05:30:30,875 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 73 [2018-11-23 05:30:30,875 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 05:30:30,876 INFO L225 Difference]: With dead ends: 1039 [2018-11-23 05:30:30,876 INFO L226 Difference]: Without dead ends: 974 [2018-11-23 05:30:30,877 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 05:30:30,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 974 states. [2018-11-23 05:30:30,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 974 to 974. [2018-11-23 05:30:30,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 974 states. [2018-11-23 05:30:30,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 974 states to 974 states and 1207 transitions. [2018-11-23 05:30:30,919 INFO L78 Accepts]: Start accepts. Automaton has 974 states and 1207 transitions. Word has length 73 [2018-11-23 05:30:30,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 05:30:30,919 INFO L480 AbstractCegarLoop]: Abstraction has 974 states and 1207 transitions. [2018-11-23 05:30:30,919 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 05:30:30,919 INFO L276 IsEmpty]: Start isEmpty. Operand 974 states and 1207 transitions. [2018-11-23 05:30:30,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 05:30:30,920 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 05:30:30,920 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 05:30:30,920 INFO L423 AbstractCegarLoop]: === Iteration 67 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 05:30:30,920 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 05:30:30,920 INFO L82 PathProgramCache]: Analyzing trace with hash -1533375131, now seen corresponding path program 1 times [2018-11-23 05:30:30,920 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 05:30:30,920 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 05:30:30,921 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:30,921 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 05:30:30,921 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 05:30:30,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 05:30:30,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 05:30:30,978 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [?] ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 0;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 0; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET #1504#return; VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647;~d~0 := #t~nondet150;havoc #t~nondet150;assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647;~status~9 := #t~nondet151;havoc #t~nondet151;assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647;~irp~1 := #t~nondet152;havoc #t~nondet152;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;~we_should_unload~0 := #t~nondet153;havoc #t~nondet153;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~irp_choice~0 := #t~nondet154;havoc #t~nondet154;assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~devobj~0 := #t~nondet155;havoc #t~nondet155;havoc ~__cil_tmp9~1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 5;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 1;~pirp~0 := ~irp~1; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] CALL call _BLAST_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] RET #1370#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume ~status~9 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call stub_driver_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1372#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~status~9 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~tmp_ndt_1~0 := #t~nondet156;havoc #t~nondet156; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 2 == ~tmp_ndt_1~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [|CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~deviceExtension__Active~1 := #t~nondet26;havoc #t~nondet26;havoc ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(2 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(1 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 7 == ~deviceExtension__Active~1; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [|CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136;havoc #t~nondet136;assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet137;havoc #t~nondet137;havoc ~irpSp__Control~0;havoc ~tmp~6;havoc ~tmp___0~3;havoc ~__cil_tmp8~0;havoc ~__cil_tmp9~0;havoc ~__cil_tmp10~2;havoc ~__cil_tmp11~2;havoc ~__cil_tmp12~1;~__cil_tmp8~0 := 56;~__cil_tmp9~0 := 16384;~__cil_tmp10~2 := 131072;~__cil_tmp11~2 := 147456;~__cil_tmp12~1 := 147512; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~s~0 != ~NP~0); VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~irpSp__Control~0 := 224; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [|IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647;~Irp__PendingReturned~1 := #t~nondet162;havoc #t~nondet162;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647;~lcontext~0 := #t~nondet163;havoc #t~nondet163;havoc ~__cil_tmp8~1; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~compRegistered~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~routine~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [|HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647;~Irp__PendingReturned~0 := #t~nondet134;havoc #t~nondet134;assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135;havoc #t~nondet135; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~Irp__PendingReturned~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~pended~0;~pended~0 := 1; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~myStatus~0 >= 0); VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] #res := ~myStatus~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1474#return; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#t~ret164|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647;~compRetStatus~0 := #t~ret164;havoc #t~ret164; VAL [IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~Irp__PendingReturned~1);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647;~tmp_ndt_4~0 := #t~nondet166;havoc #t~nondet166; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~tmp_ndt_4~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~returnVal2~0 := 0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1408#return; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#t~ret138|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647;~tmp~6 := #t~ret138;havoc #t~ret138;#res := ~tmp~6; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1500#return; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#t~ret30|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;~status~3 := #t~ret30;havoc #t~ret30; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1374#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |main_#t~ret159|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647;~status~9 := #t~ret159;havoc #t~ret159; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(0 != ~we_should_unload~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~NP~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~MPR3~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~UNLOADED~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -1 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~SKIP2~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 != ~IPC~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(1 != ~pended~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 259 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call errorFn(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !false; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L31] int s ; [L32] int UNLOADED ; [L33] int NP ; [L34] int DC ; [L35] int SKIP1 ; [L36] int SKIP2 ; [L37] int MPR1 ; [L38] int MPR3 ; [L39] int IPC ; [L40] int pended ; [L41] int compFptr ; [L42] int compRegistered ; [L43] int lowerDriverReturn ; [L44] int setEventCalled ; [L45] int customIrp ; [L46] int routine ; [L47] int myStatus ; [L48] int pirp ; [L49] int Executive ; [L50] int Suspended ; [L51] int KernelMode ; [L52] int DeviceUsageTypePaging ; VAL [\old(compFptr)=276, \old(compRegistered)=265, \old(customIrp)=268, \old(DC)=261, \old(DeviceUsageTypePaging)=273, \old(Executive)=266, \old(IPC)=262, \old(KernelMode)=281, \old(lowerDriverReturn)=279, \old(MPR1)=275, \old(MPR3)=271, \old(myStatus)=278, \old(NP)=267, \old(pended)=280, \old(pirp)=272, \old(routine)=269, \old(s)=263, \old(setEventCalled)=274, \old(SKIP1)=270, \old(SKIP2)=264, \old(Suspended)=277, \old(UNLOADED)=260, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=0, UNLOADED=0] [L1717] int pirp__IoStatus__Status ; [L1718] int d = __VERIFIER_nondet_int() ; [L1719] int status = __VERIFIER_nondet_int() ; [L1720] int irp = __VERIFIER_nondet_int() ; [L1721] int we_should_unload = __VERIFIER_nondet_int() ; [L1722] int irp_choice = __VERIFIER_nondet_int() ; [L1723] int devobj = __VERIFIER_nondet_int() ; [L1724] int __cil_tmp9 ; [L1729] s = 0 [L1730] UNLOADED = 0 [L1731] NP = 0 [L1732] DC = 0 [L1733] SKIP1 = 0 [L1734] SKIP2 = 0 [L1735] MPR1 = 0 [L1736] MPR3 = 0 [L1737] IPC = 0 [L1738] pended = 0 [L1739] compFptr = 0 [L1740] compRegistered = 0 [L1741] lowerDriverReturn = 0 [L1742] setEventCalled = 0 [L1743] customIrp = 0 [L1744] routine = 0 [L1745] myStatus = 0 [L1746] pirp = 0 [L1747] Executive = 0 [L1748] Suspended = 5 [L1749] KernelMode = 0 [L1750] DeviceUsageTypePaging = 1 [L1753] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=0, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1754] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=5, UNLOADED=0] [L66] UNLOADED = 0 [L67] NP = 1 [L68] DC = 2 [L69] SKIP1 = 3 [L70] SKIP2 = 4 [L71] MPR1 = 5 [L72] MPR3 = 6 [L73] IPC = 7 [L74] s = UNLOADED [L75] pended = 0 [L76] compFptr = 0 [L77] compRegistered = 0 [L78] lowerDriverReturn = 0 [L79] setEventCalled = 0 [L80] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1754] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1756] COND TRUE status >= 0 [L1757] s = NP [L1758] customIrp = 0 [L1759] setEventCalled = customIrp [L1760] lowerDriverReturn = setEventCalled [L1761] compRegistered = lowerDriverReturn [L1762] compFptr = compRegistered [L1763] pended = compFptr [L1764] pirp__IoStatus__Status = 0 [L1765] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1766] COND TRUE irp_choice == 0 [L1767] pirp__IoStatus__Status = -1073741637 [L1768] myStatus = -1073741637 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1771] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1706] s = NP [L1707] customIrp = 0 [L1708] setEventCalled = customIrp [L1709] lowerDriverReturn = setEventCalled [L1710] compRegistered = lowerDriverReturn [L1711] compFptr = compRegistered [L1712] pended = compFptr VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1771] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1774] COND FALSE !(status < 0) [L1778] int tmp_ndt_1; [L1779] tmp_ndt_1 = __VERIFIER_nondet_int() [L1780] COND TRUE tmp_ndt_1 == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] CALL, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L312] int deviceExtension__Active = __VERIFIER_nondet_int() ; [L313] int status ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L316] COND FALSE !(deviceExtension__Active == 2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L319] COND FALSE !(deviceExtension__Active == 3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L322] COND FALSE !(deviceExtension__Active == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L325] COND TRUE deviceExtension__Active == 7 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] CALL, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1590] int currentIrpStack__Parameters__DeviceIoControl__IoControlCode = __VERIFIER_nondet_int() ; [L1591] int deviceExtension__TargetDeviceObject = __VERIFIER_nondet_int() ; [L1592] int irpSp__Control ; [L1593] int tmp ; [L1594] int tmp___0 ; [L1595] int __cil_tmp8 ; [L1596] int __cil_tmp9 ; [L1597] int __cil_tmp10 ; [L1598] int __cil_tmp11 ; [L1599] int __cil_tmp12 ; [L1603] __cil_tmp8 = 56 [L1604] __cil_tmp9 = 16384 [L1605] __cil_tmp10 = 131072 [L1606] __cil_tmp11 = 147456 [L1607] __cil_tmp12 = 147512 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1608] COND TRUE currentIrpStack__Parameters__DeviceIoControl__IoControlCode == __cil_tmp12 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1609] COND FALSE !(s != NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1614] COND FALSE !(compRegistered != 0) [L1619] compRegistered = 1 [L1620] routine = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1624] irpSp__Control = 224 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] CALL, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1899] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1900] int returnVal2 ; [L1901] int compRetStatus ; [L1902] int lcontext = __VERIFIER_nondet_int() ; [L1903] unsigned long __cil_tmp8 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1906] COND TRUE \read(compRegistered) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1907] COND TRUE routine == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] CALL, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1568] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1569] int Irp__AssociatedIrp__SystemBuffer = __VERIFIER_nondet_int() ; [L1572] COND TRUE \read(Irp__PendingReturned) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1573] COND TRUE pended == 0 [L1574] pended = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1581] COND FALSE !(myStatus >= 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1586] return (myStatus); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=-1073741637, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] RET, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, HPCdrCompletion(DeviceObject, Irp, lcontext)=-1073741637, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] compRetStatus = HPCdrCompletion(DeviceObject, Irp, lcontext) [L1919] __cil_tmp8 = (unsigned long )compRetStatus VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1920] COND FALSE !(__cil_tmp8 == -1073741802) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1927] COND FALSE !(\read(Irp__PendingReturned)) [L1930] int tmp_ndt_4; [L1931] tmp_ndt_4 = __VERIFIER_nondet_int() [L1932] COND TRUE tmp_ndt_4 == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1943] returnVal2 = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1957] COND TRUE s == NP [L1958] s = IPC [L1959] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1980] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1625] RET, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IofCallDriver(deviceExtension__TargetDeviceObject, Irp)=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] tmp = IofCallDriver(deviceExtension__TargetDeviceObject, Irp) [L1627] return (tmp); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp=0, UNLOADED=0] [L347] RET, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioHPCdrDeviceControl(DeviceObject, Irp)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] status = CdAudioHPCdrDeviceControl(DeviceObject, Irp) [L362] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0] [L1797] RET, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioDeviceControl(devobj, pirp)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] status = CdAudioDeviceControl(devobj, pirp) [L1818] COND FALSE !(\read(we_should_unload)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1824] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1825] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1832] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1833] COND FALSE !(s == MPR3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1840] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1841] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1842] COND TRUE s != SKIP2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1843] COND FALSE !(s != IPC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1856] COND FALSE !(pended != 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1868] COND TRUE status != 259 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1870] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L58] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] ----- [2018-11-23 05:30:32,688 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 05:30:32 BoogieIcfgContainer [2018-11-23 05:30:32,688 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 05:30:32,688 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 05:30:32,688 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 05:30:32,688 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 05:30:32,689 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 05:30:10" (3/4) ... [2018-11-23 05:30:32,692 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [?] ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 0;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 0; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET #1504#return; VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647;~d~0 := #t~nondet150;havoc #t~nondet150;assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647;~status~9 := #t~nondet151;havoc #t~nondet151;assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647;~irp~1 := #t~nondet152;havoc #t~nondet152;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;~we_should_unload~0 := #t~nondet153;havoc #t~nondet153;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~irp_choice~0 := #t~nondet154;havoc #t~nondet154;assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~devobj~0 := #t~nondet155;havoc #t~nondet155;havoc ~__cil_tmp9~1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 5;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 1;~pirp~0 := ~irp~1; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] CALL call _BLAST_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] RET #1370#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume ~status~9 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call stub_driver_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1372#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~status~9 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~tmp_ndt_1~0 := #t~nondet156;havoc #t~nondet156; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 2 == ~tmp_ndt_1~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [|CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~deviceExtension__Active~1 := #t~nondet26;havoc #t~nondet26;havoc ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(2 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(1 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 7 == ~deviceExtension__Active~1; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [|CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136;havoc #t~nondet136;assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet137;havoc #t~nondet137;havoc ~irpSp__Control~0;havoc ~tmp~6;havoc ~tmp___0~3;havoc ~__cil_tmp8~0;havoc ~__cil_tmp9~0;havoc ~__cil_tmp10~2;havoc ~__cil_tmp11~2;havoc ~__cil_tmp12~1;~__cil_tmp8~0 := 56;~__cil_tmp9~0 := 16384;~__cil_tmp10~2 := 131072;~__cil_tmp11~2 := 147456;~__cil_tmp12~1 := 147512; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~s~0 != ~NP~0); VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~irpSp__Control~0 := 224; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [|IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647;~Irp__PendingReturned~1 := #t~nondet162;havoc #t~nondet162;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647;~lcontext~0 := #t~nondet163;havoc #t~nondet163;havoc ~__cil_tmp8~1; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~compRegistered~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~routine~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [|HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647;~Irp__PendingReturned~0 := #t~nondet134;havoc #t~nondet134;assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135;havoc #t~nondet135; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~Irp__PendingReturned~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~pended~0;~pended~0 := 1; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~myStatus~0 >= 0); VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] #res := ~myStatus~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1474#return; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#t~ret164|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647;~compRetStatus~0 := #t~ret164;havoc #t~ret164; VAL [IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~Irp__PendingReturned~1);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647;~tmp_ndt_4~0 := #t~nondet166;havoc #t~nondet166; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~tmp_ndt_4~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~returnVal2~0 := 0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1408#return; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#t~ret138|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647;~tmp~6 := #t~ret138;havoc #t~ret138;#res := ~tmp~6; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1500#return; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#t~ret30|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;~status~3 := #t~ret30;havoc #t~ret30; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1374#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |main_#t~ret159|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647;~status~9 := #t~ret159;havoc #t~ret159; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(0 != ~we_should_unload~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~NP~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~MPR3~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~UNLOADED~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -1 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~SKIP2~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 != ~IPC~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(1 != ~pended~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 259 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call errorFn(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !false; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L31] int s ; [L32] int UNLOADED ; [L33] int NP ; [L34] int DC ; [L35] int SKIP1 ; [L36] int SKIP2 ; [L37] int MPR1 ; [L38] int MPR3 ; [L39] int IPC ; [L40] int pended ; [L41] int compFptr ; [L42] int compRegistered ; [L43] int lowerDriverReturn ; [L44] int setEventCalled ; [L45] int customIrp ; [L46] int routine ; [L47] int myStatus ; [L48] int pirp ; [L49] int Executive ; [L50] int Suspended ; [L51] int KernelMode ; [L52] int DeviceUsageTypePaging ; VAL [\old(compFptr)=276, \old(compRegistered)=265, \old(customIrp)=268, \old(DC)=261, \old(DeviceUsageTypePaging)=273, \old(Executive)=266, \old(IPC)=262, \old(KernelMode)=281, \old(lowerDriverReturn)=279, \old(MPR1)=275, \old(MPR3)=271, \old(myStatus)=278, \old(NP)=267, \old(pended)=280, \old(pirp)=272, \old(routine)=269, \old(s)=263, \old(setEventCalled)=274, \old(SKIP1)=270, \old(SKIP2)=264, \old(Suspended)=277, \old(UNLOADED)=260, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=0, UNLOADED=0] [L1717] int pirp__IoStatus__Status ; [L1718] int d = __VERIFIER_nondet_int() ; [L1719] int status = __VERIFIER_nondet_int() ; [L1720] int irp = __VERIFIER_nondet_int() ; [L1721] int we_should_unload = __VERIFIER_nondet_int() ; [L1722] int irp_choice = __VERIFIER_nondet_int() ; [L1723] int devobj = __VERIFIER_nondet_int() ; [L1724] int __cil_tmp9 ; [L1729] s = 0 [L1730] UNLOADED = 0 [L1731] NP = 0 [L1732] DC = 0 [L1733] SKIP1 = 0 [L1734] SKIP2 = 0 [L1735] MPR1 = 0 [L1736] MPR3 = 0 [L1737] IPC = 0 [L1738] pended = 0 [L1739] compFptr = 0 [L1740] compRegistered = 0 [L1741] lowerDriverReturn = 0 [L1742] setEventCalled = 0 [L1743] customIrp = 0 [L1744] routine = 0 [L1745] myStatus = 0 [L1746] pirp = 0 [L1747] Executive = 0 [L1748] Suspended = 5 [L1749] KernelMode = 0 [L1750] DeviceUsageTypePaging = 1 [L1753] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=0, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1754] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=5, UNLOADED=0] [L66] UNLOADED = 0 [L67] NP = 1 [L68] DC = 2 [L69] SKIP1 = 3 [L70] SKIP2 = 4 [L71] MPR1 = 5 [L72] MPR3 = 6 [L73] IPC = 7 [L74] s = UNLOADED [L75] pended = 0 [L76] compFptr = 0 [L77] compRegistered = 0 [L78] lowerDriverReturn = 0 [L79] setEventCalled = 0 [L80] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1754] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1756] COND TRUE status >= 0 [L1757] s = NP [L1758] customIrp = 0 [L1759] setEventCalled = customIrp [L1760] lowerDriverReturn = setEventCalled [L1761] compRegistered = lowerDriverReturn [L1762] compFptr = compRegistered [L1763] pended = compFptr [L1764] pirp__IoStatus__Status = 0 [L1765] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1766] COND TRUE irp_choice == 0 [L1767] pirp__IoStatus__Status = -1073741637 [L1768] myStatus = -1073741637 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1771] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1706] s = NP [L1707] customIrp = 0 [L1708] setEventCalled = customIrp [L1709] lowerDriverReturn = setEventCalled [L1710] compRegistered = lowerDriverReturn [L1711] compFptr = compRegistered [L1712] pended = compFptr VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1771] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1774] COND FALSE !(status < 0) [L1778] int tmp_ndt_1; [L1779] tmp_ndt_1 = __VERIFIER_nondet_int() [L1780] COND TRUE tmp_ndt_1 == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] CALL, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L312] int deviceExtension__Active = __VERIFIER_nondet_int() ; [L313] int status ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L316] COND FALSE !(deviceExtension__Active == 2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L319] COND FALSE !(deviceExtension__Active == 3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L322] COND FALSE !(deviceExtension__Active == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L325] COND TRUE deviceExtension__Active == 7 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] CALL, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1590] int currentIrpStack__Parameters__DeviceIoControl__IoControlCode = __VERIFIER_nondet_int() ; [L1591] int deviceExtension__TargetDeviceObject = __VERIFIER_nondet_int() ; [L1592] int irpSp__Control ; [L1593] int tmp ; [L1594] int tmp___0 ; [L1595] int __cil_tmp8 ; [L1596] int __cil_tmp9 ; [L1597] int __cil_tmp10 ; [L1598] int __cil_tmp11 ; [L1599] int __cil_tmp12 ; [L1603] __cil_tmp8 = 56 [L1604] __cil_tmp9 = 16384 [L1605] __cil_tmp10 = 131072 [L1606] __cil_tmp11 = 147456 [L1607] __cil_tmp12 = 147512 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1608] COND TRUE currentIrpStack__Parameters__DeviceIoControl__IoControlCode == __cil_tmp12 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1609] COND FALSE !(s != NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1614] COND FALSE !(compRegistered != 0) [L1619] compRegistered = 1 [L1620] routine = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1624] irpSp__Control = 224 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] CALL, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1899] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1900] int returnVal2 ; [L1901] int compRetStatus ; [L1902] int lcontext = __VERIFIER_nondet_int() ; [L1903] unsigned long __cil_tmp8 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1906] COND TRUE \read(compRegistered) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1907] COND TRUE routine == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] CALL, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1568] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1569] int Irp__AssociatedIrp__SystemBuffer = __VERIFIER_nondet_int() ; [L1572] COND TRUE \read(Irp__PendingReturned) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1573] COND TRUE pended == 0 [L1574] pended = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1581] COND FALSE !(myStatus >= 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1586] return (myStatus); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=-1073741637, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] RET, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, HPCdrCompletion(DeviceObject, Irp, lcontext)=-1073741637, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] compRetStatus = HPCdrCompletion(DeviceObject, Irp, lcontext) [L1919] __cil_tmp8 = (unsigned long )compRetStatus VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1920] COND FALSE !(__cil_tmp8 == -1073741802) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1927] COND FALSE !(\read(Irp__PendingReturned)) [L1930] int tmp_ndt_4; [L1931] tmp_ndt_4 = __VERIFIER_nondet_int() [L1932] COND TRUE tmp_ndt_4 == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1943] returnVal2 = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1957] COND TRUE s == NP [L1958] s = IPC [L1959] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1980] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1625] RET, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IofCallDriver(deviceExtension__TargetDeviceObject, Irp)=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] tmp = IofCallDriver(deviceExtension__TargetDeviceObject, Irp) [L1627] return (tmp); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp=0, UNLOADED=0] [L347] RET, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioHPCdrDeviceControl(DeviceObject, Irp)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] status = CdAudioHPCdrDeviceControl(DeviceObject, Irp) [L362] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0] [L1797] RET, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioDeviceControl(devobj, pirp)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] status = CdAudioDeviceControl(devobj, pirp) [L1818] COND FALSE !(\read(we_should_unload)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1824] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1825] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1832] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1833] COND FALSE !(s == MPR3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1840] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1841] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1842] COND TRUE s != SKIP2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1843] COND FALSE !(s != IPC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1856] COND FALSE !(pended != 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1868] COND TRUE status != 259 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1870] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L58] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] ----- [2018-11-23 05:30:36,418 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_399a1f2f-34c8-470a-9c19-9440902053e0/bin-2019/uautomizer/witness.graphml [2018-11-23 05:30:36,419 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 05:30:36,419 INFO L168 Benchmark]: Toolchain (without parser) took 27579.11 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 736.6 MB). Free memory was 956.3 MB in the beginning and 1.2 GB in the end (delta: -288.5 MB). Peak memory consumption was 448.1 MB. Max. memory is 11.5 GB. [2018-11-23 05:30:36,420 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 05:30:36,421 INFO L168 Benchmark]: CACSL2BoogieTranslator took 397.58 ms. Allocated memory is still 1.0 GB. Free memory was 956.3 MB in the beginning and 913.4 MB in the end (delta: 42.9 MB). Peak memory consumption was 42.9 MB. Max. memory is 11.5 GB. [2018-11-23 05:30:36,421 INFO L168 Benchmark]: Boogie Procedure Inliner took 74.92 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.8 MB). Free memory was 913.4 MB in the beginning and 1.1 GB in the end (delta: -223.4 MB). Peak memory consumption was 19.4 MB. Max. memory is 11.5 GB. [2018-11-23 05:30:36,421 INFO L168 Benchmark]: Boogie Preprocessor took 50.23 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 05:30:36,421 INFO L168 Benchmark]: RCFGBuilder took 1024.46 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 986.5 MB in the end (delta: 150.2 MB). Peak memory consumption was 150.2 MB. Max. memory is 11.5 GB. [2018-11-23 05:30:36,421 INFO L168 Benchmark]: TraceAbstraction took 22297.93 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 588.8 MB). Free memory was 986.5 MB in the beginning and 1.3 GB in the end (delta: -349.6 MB). Peak memory consumption was 239.2 MB. Max. memory is 11.5 GB. [2018-11-23 05:30:36,422 INFO L168 Benchmark]: Witness Printer took 3730.46 ms. Allocated memory is still 1.8 GB. Free memory was 1.3 GB in the beginning and 1.2 GB in the end (delta: 91.3 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. [2018-11-23 05:30:36,423 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 397.58 ms. Allocated memory is still 1.0 GB. Free memory was 956.3 MB in the beginning and 913.4 MB in the end (delta: 42.9 MB). Peak memory consumption was 42.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 74.92 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.8 MB). Free memory was 913.4 MB in the beginning and 1.1 GB in the end (delta: -223.4 MB). Peak memory consumption was 19.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 50.23 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1024.46 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 986.5 MB in the end (delta: 150.2 MB). Peak memory consumption was 150.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 22297.93 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 588.8 MB). Free memory was 986.5 MB in the beginning and 1.3 GB in the end (delta: -349.6 MB). Peak memory consumption was 239.2 MB. Max. memory is 11.5 GB. * Witness Printer took 3730.46 ms. Allocated memory is still 1.8 GB. Free memory was 1.3 GB in the beginning and 1.2 GB in the end (delta: 91.3 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 58]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L31] int s ; [L32] int UNLOADED ; [L33] int NP ; [L34] int DC ; [L35] int SKIP1 ; [L36] int SKIP2 ; [L37] int MPR1 ; [L38] int MPR3 ; [L39] int IPC ; [L40] int pended ; [L41] int compFptr ; [L42] int compRegistered ; [L43] int lowerDriverReturn ; [L44] int setEventCalled ; [L45] int customIrp ; [L46] int routine ; [L47] int myStatus ; [L48] int pirp ; [L49] int Executive ; [L50] int Suspended ; [L51] int KernelMode ; [L52] int DeviceUsageTypePaging ; VAL [\old(compFptr)=276, \old(compRegistered)=265, \old(customIrp)=268, \old(DC)=261, \old(DeviceUsageTypePaging)=273, \old(Executive)=266, \old(IPC)=262, \old(KernelMode)=281, \old(lowerDriverReturn)=279, \old(MPR1)=275, \old(MPR3)=271, \old(myStatus)=278, \old(NP)=267, \old(pended)=280, \old(pirp)=272, \old(routine)=269, \old(s)=263, \old(setEventCalled)=274, \old(SKIP1)=270, \old(SKIP2)=264, \old(Suspended)=277, \old(UNLOADED)=260, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=0, UNLOADED=0] [L1717] int pirp__IoStatus__Status ; [L1718] int d = __VERIFIER_nondet_int() ; [L1719] int status = __VERIFIER_nondet_int() ; [L1720] int irp = __VERIFIER_nondet_int() ; [L1721] int we_should_unload = __VERIFIER_nondet_int() ; [L1722] int irp_choice = __VERIFIER_nondet_int() ; [L1723] int devobj = __VERIFIER_nondet_int() ; [L1724] int __cil_tmp9 ; [L1729] s = 0 [L1730] UNLOADED = 0 [L1731] NP = 0 [L1732] DC = 0 [L1733] SKIP1 = 0 [L1734] SKIP2 = 0 [L1735] MPR1 = 0 [L1736] MPR3 = 0 [L1737] IPC = 0 [L1738] pended = 0 [L1739] compFptr = 0 [L1740] compRegistered = 0 [L1741] lowerDriverReturn = 0 [L1742] setEventCalled = 0 [L1743] customIrp = 0 [L1744] routine = 0 [L1745] myStatus = 0 [L1746] pirp = 0 [L1747] Executive = 0 [L1748] Suspended = 5 [L1749] KernelMode = 0 [L1750] DeviceUsageTypePaging = 1 [L1753] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=0, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1754] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=5, UNLOADED=0] [L66] UNLOADED = 0 [L67] NP = 1 [L68] DC = 2 [L69] SKIP1 = 3 [L70] SKIP2 = 4 [L71] MPR1 = 5 [L72] MPR3 = 6 [L73] IPC = 7 [L74] s = UNLOADED [L75] pended = 0 [L76] compFptr = 0 [L77] compRegistered = 0 [L78] lowerDriverReturn = 0 [L79] setEventCalled = 0 [L80] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1754] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1756] COND TRUE status >= 0 [L1757] s = NP [L1758] customIrp = 0 [L1759] setEventCalled = customIrp [L1760] lowerDriverReturn = setEventCalled [L1761] compRegistered = lowerDriverReturn [L1762] compFptr = compRegistered [L1763] pended = compFptr [L1764] pirp__IoStatus__Status = 0 [L1765] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1766] COND TRUE irp_choice == 0 [L1767] pirp__IoStatus__Status = -1073741637 [L1768] myStatus = -1073741637 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1771] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1706] s = NP [L1707] customIrp = 0 [L1708] setEventCalled = customIrp [L1709] lowerDriverReturn = setEventCalled [L1710] compRegistered = lowerDriverReturn [L1711] compFptr = compRegistered [L1712] pended = compFptr VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1771] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1774] COND FALSE !(status < 0) [L1778] int tmp_ndt_1; [L1779] tmp_ndt_1 = __VERIFIER_nondet_int() [L1780] COND TRUE tmp_ndt_1 == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] CALL, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L312] int deviceExtension__Active = __VERIFIER_nondet_int() ; [L313] int status ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L316] COND FALSE !(deviceExtension__Active == 2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L319] COND FALSE !(deviceExtension__Active == 3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L322] COND FALSE !(deviceExtension__Active == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L325] COND TRUE deviceExtension__Active == 7 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] CALL, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1590] int currentIrpStack__Parameters__DeviceIoControl__IoControlCode = __VERIFIER_nondet_int() ; [L1591] int deviceExtension__TargetDeviceObject = __VERIFIER_nondet_int() ; [L1592] int irpSp__Control ; [L1593] int tmp ; [L1594] int tmp___0 ; [L1595] int __cil_tmp8 ; [L1596] int __cil_tmp9 ; [L1597] int __cil_tmp10 ; [L1598] int __cil_tmp11 ; [L1599] int __cil_tmp12 ; [L1603] __cil_tmp8 = 56 [L1604] __cil_tmp9 = 16384 [L1605] __cil_tmp10 = 131072 [L1606] __cil_tmp11 = 147456 [L1607] __cil_tmp12 = 147512 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1608] COND TRUE currentIrpStack__Parameters__DeviceIoControl__IoControlCode == __cil_tmp12 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1609] COND FALSE !(s != NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1614] COND FALSE !(compRegistered != 0) [L1619] compRegistered = 1 [L1620] routine = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1624] irpSp__Control = 224 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] CALL, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1899] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1900] int returnVal2 ; [L1901] int compRetStatus ; [L1902] int lcontext = __VERIFIER_nondet_int() ; [L1903] unsigned long __cil_tmp8 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1906] COND TRUE \read(compRegistered) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1907] COND TRUE routine == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] CALL, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1568] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1569] int Irp__AssociatedIrp__SystemBuffer = __VERIFIER_nondet_int() ; [L1572] COND TRUE \read(Irp__PendingReturned) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1573] COND TRUE pended == 0 [L1574] pended = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1581] COND FALSE !(myStatus >= 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1586] return (myStatus); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=-1073741637, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] RET, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, HPCdrCompletion(DeviceObject, Irp, lcontext)=-1073741637, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] compRetStatus = HPCdrCompletion(DeviceObject, Irp, lcontext) [L1919] __cil_tmp8 = (unsigned long )compRetStatus VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1920] COND FALSE !(__cil_tmp8 == -1073741802) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1927] COND FALSE !(\read(Irp__PendingReturned)) [L1930] int tmp_ndt_4; [L1931] tmp_ndt_4 = __VERIFIER_nondet_int() [L1932] COND TRUE tmp_ndt_4 == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1943] returnVal2 = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1957] COND TRUE s == NP [L1958] s = IPC [L1959] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1980] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1625] RET, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IofCallDriver(deviceExtension__TargetDeviceObject, Irp)=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] tmp = IofCallDriver(deviceExtension__TargetDeviceObject, Irp) [L1627] return (tmp); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp=0, UNLOADED=0] [L347] RET, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioHPCdrDeviceControl(DeviceObject, Irp)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] status = CdAudioHPCdrDeviceControl(DeviceObject, Irp) [L362] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0] [L1797] RET, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioDeviceControl(devobj, pirp)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] status = CdAudioDeviceControl(devobj, pirp) [L1818] COND FALSE !(\read(we_should_unload)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1824] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1825] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1832] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1833] COND FALSE !(s == MPR3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1840] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1841] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1842] COND TRUE s != SKIP2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1843] COND FALSE !(s != IPC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1856] COND FALSE !(pended != 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1868] COND TRUE status != 259 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1870] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L58] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 30 procedures, 536 locations, 1 error locations. UNSAFE Result, 22.2s OverallTime, 67 OverallIterations, 2 TraceHistogramMax, 12.7s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 38691 SDtfs, 15949 SDslu, 167847 SDs, 0 SdLazy, 13533 SolverSat, 2547 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 7.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 636 GetRequests, 147 SyntacticMatches, 6 SemanticMatches, 483 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 185 ImplicationChecksByTransitivity, 3.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=994occurred in iteration=65, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 2.6s AutomataMinimizationTime, 66 MinimizatonAttempts, 1887 StatesRemovedByMinimization, 41 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.8s InterpolantComputationTime, 3968 NumberOfCodeBlocks, 3968 NumberOfCodeBlocksAsserted, 67 NumberOfCheckSat, 3829 ConstructedInterpolants, 0 QuantifiedInterpolants, 502699 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 66 InterpolantComputations, 66 PerfectInterpolantSequences, 4/4 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...