./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ntdrivers-simplified/kbfiltr_simpl2_false-unreach-call_true-valid-memsafety_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ntdrivers-simplified/kbfiltr_simpl2_false-unreach-call_true-valid-memsafety_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e107441daffe219fcef86523aff14082b11c5fb6 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-22 22:30:27,767 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-22 22:30:27,768 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-22 22:30:27,774 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-22 22:30:27,774 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-22 22:30:27,775 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-22 22:30:27,776 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-22 22:30:27,777 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-22 22:30:27,778 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-22 22:30:27,778 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-22 22:30:27,779 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-22 22:30:27,779 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-22 22:30:27,780 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-22 22:30:27,780 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-22 22:30:27,781 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-22 22:30:27,782 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-22 22:30:27,782 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-22 22:30:27,783 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-22 22:30:27,785 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-22 22:30:27,786 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-22 22:30:27,786 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-22 22:30:27,787 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-22 22:30:27,789 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-22 22:30:27,789 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-22 22:30:27,789 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-22 22:30:27,790 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-22 22:30:27,791 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-22 22:30:27,791 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-22 22:30:27,792 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-22 22:30:27,792 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-22 22:30:27,793 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-22 22:30:27,793 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-22 22:30:27,793 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-22 22:30:27,793 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-22 22:30:27,794 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-22 22:30:27,795 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-22 22:30:27,795 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-22 22:30:27,804 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-22 22:30:27,804 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-22 22:30:27,804 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-22 22:30:27,805 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-22 22:30:27,805 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-22 22:30:27,805 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-22 22:30:27,805 INFO L133 SettingsManager]: * Use SBE=true [2018-11-22 22:30:27,805 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-22 22:30:27,806 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-22 22:30:27,806 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-22 22:30:27,806 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-22 22:30:27,806 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-22 22:30:27,806 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-22 22:30:27,806 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-22 22:30:27,806 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-22 22:30:27,807 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-22 22:30:27,807 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-22 22:30:27,807 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-22 22:30:27,807 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-22 22:30:27,807 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-22 22:30:27,807 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-22 22:30:27,808 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-22 22:30:27,808 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-22 22:30:27,808 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-22 22:30:27,808 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-22 22:30:27,808 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-22 22:30:27,808 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-22 22:30:27,808 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-22 22:30:27,809 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-22 22:30:27,809 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-22 22:30:27,809 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e107441daffe219fcef86523aff14082b11c5fb6 [2018-11-22 22:30:27,832 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-22 22:30:27,840 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-22 22:30:27,843 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-22 22:30:27,844 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-22 22:30:27,844 INFO L276 PluginConnector]: CDTParser initialized [2018-11-22 22:30:27,845 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/../../sv-benchmarks/c/ntdrivers-simplified/kbfiltr_simpl2_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-22 22:30:27,884 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/data/c1b0d2212/6e8912f9a07c4a0ea0a13629874d045d/FLAG3c86239d3 [2018-11-22 22:30:28,307 INFO L307 CDTParser]: Found 1 translation units. [2018-11-22 22:30:28,307 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/sv-benchmarks/c/ntdrivers-simplified/kbfiltr_simpl2_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-22 22:30:28,317 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/data/c1b0d2212/6e8912f9a07c4a0ea0a13629874d045d/FLAG3c86239d3 [2018-11-22 22:30:28,328 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/data/c1b0d2212/6e8912f9a07c4a0ea0a13629874d045d [2018-11-22 22:30:28,331 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-22 22:30:28,332 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-22 22:30:28,332 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-22 22:30:28,332 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-22 22:30:28,335 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-22 22:30:28,336 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,338 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@325aa0bd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28, skipping insertion in model container [2018-11-22 22:30:28,338 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,346 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-22 22:30:28,378 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-22 22:30:28,547 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:30:28,549 INFO L191 MainTranslator]: Completed pre-run [2018-11-22 22:30:28,595 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 22:30:28,607 INFO L195 MainTranslator]: Completed translation [2018-11-22 22:30:28,607 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28 WrapperNode [2018-11-22 22:30:28,607 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-22 22:30:28,608 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-22 22:30:28,608 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-22 22:30:28,608 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-22 22:30:28,652 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,662 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,669 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-22 22:30:28,669 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-22 22:30:28,669 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-22 22:30:28,669 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-22 22:30:28,676 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,677 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,678 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,679 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,688 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,694 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,696 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... [2018-11-22 22:30:28,699 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-22 22:30:28,699 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-22 22:30:28,699 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-22 22:30:28,699 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-22 22:30:28,699 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-22 22:30:28,731 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2018-11-22 22:30:28,731 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2018-11-22 22:30:28,731 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Complete [2018-11-22 22:30:28,731 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Complete [2018-11-22 22:30:28,731 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_Power [2018-11-22 22:30:28,731 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_Power [2018-11-22 22:30:28,731 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2018-11-22 22:30:28,731 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2018-11-22 22:30:28,732 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2018-11-22 22:30:28,732 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2018-11-22 22:30:28,732 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2018-11-22 22:30:28,732 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2018-11-22 22:30:28,732 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-22 22:30:28,732 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-22 22:30:28,732 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2018-11-22 22:30:28,732 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2018-11-22 22:30:28,733 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2018-11-22 22:30:28,733 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2018-11-22 22:30:28,733 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2018-11-22 22:30:28,733 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2018-11-22 22:30:28,733 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_CreateClose [2018-11-22 22:30:28,733 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_CreateClose [2018-11-22 22:30:28,733 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-22 22:30:28,733 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-22 22:30:28,734 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_InternIoCtl [2018-11-22 22:30:28,734 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_InternIoCtl [2018-11-22 22:30:28,734 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2018-11-22 22:30:28,734 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2018-11-22 22:30:28,734 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2018-11-22 22:30:28,734 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2018-11-22 22:30:28,734 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-22 22:30:28,734 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-22 22:30:28,734 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_DispatchPassThrough [2018-11-22 22:30:28,735 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_DispatchPassThrough [2018-11-22 22:30:28,735 INFO L130 BoogieDeclarations]: Found specification of procedure KbFilter_PnP [2018-11-22 22:30:28,735 INFO L138 BoogieDeclarations]: Found implementation of procedure KbFilter_PnP [2018-11-22 22:30:28,863 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:30:28,864 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:30:28,945 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:30:28,945 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:30:29,022 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:30:29,022 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:30:29,050 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:30:29,051 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:30:29,137 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:30:29,138 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:30:29,166 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-22 22:30:29,166 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-22 22:30:29,257 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-22 22:30:29,257 INFO L280 CfgBuilder]: Removed 0 assue(true) statements. [2018-11-22 22:30:29,257 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:30:29 BoogieIcfgContainer [2018-11-22 22:30:29,257 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-22 22:30:29,258 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-22 22:30:29,258 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-22 22:30:29,259 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-22 22:30:29,259 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 10:30:28" (1/3) ... [2018-11-22 22:30:29,260 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@68f8a577 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 10:30:29, skipping insertion in model container [2018-11-22 22:30:29,260 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 10:30:28" (2/3) ... [2018-11-22 22:30:29,260 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@68f8a577 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 10:30:29, skipping insertion in model container [2018-11-22 22:30:29,260 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:30:29" (3/3) ... [2018-11-22 22:30:29,261 INFO L112 eAbstractionObserver]: Analyzing ICFG kbfiltr_simpl2_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-22 22:30:29,267 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-22 22:30:29,272 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-22 22:30:29,285 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-22 22:30:29,309 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-22 22:30:29,309 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-22 22:30:29,309 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-22 22:30:29,309 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-22 22:30:29,309 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-22 22:30:29,309 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-22 22:30:29,309 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-22 22:30:29,310 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-22 22:30:29,310 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-22 22:30:29,326 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states. [2018-11-22 22:30:29,329 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-22 22:30:29,330 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:29,330 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:29,332 INFO L423 AbstractCegarLoop]: === Iteration 1 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:29,335 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:29,336 INFO L82 PathProgramCache]: Analyzing trace with hash -1129426977, now seen corresponding path program 1 times [2018-11-22 22:30:29,337 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:29,337 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:29,364 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:29,365 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:29,365 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:29,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:29,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:29,485 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:29,485 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:29,488 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:29,495 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:29,495 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:29,496 INFO L87 Difference]: Start difference. First operand 240 states. Second operand 3 states. [2018-11-22 22:30:29,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:29,571 INFO L93 Difference]: Finished difference Result 390 states and 586 transitions. [2018-11-22 22:30:29,572 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:29,573 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-22 22:30:29,573 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:29,581 INFO L225 Difference]: With dead ends: 390 [2018-11-22 22:30:29,581 INFO L226 Difference]: Without dead ends: 231 [2018-11-22 22:30:29,584 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:29,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2018-11-22 22:30:29,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 231. [2018-11-22 22:30:29,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 231 states. [2018-11-22 22:30:29,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 326 transitions. [2018-11-22 22:30:29,621 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 326 transitions. Word has length 20 [2018-11-22 22:30:29,622 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:29,622 INFO L480 AbstractCegarLoop]: Abstraction has 231 states and 326 transitions. [2018-11-22 22:30:29,622 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:29,622 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 326 transitions. [2018-11-22 22:30:29,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-22 22:30:29,623 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:29,623 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:29,623 INFO L423 AbstractCegarLoop]: === Iteration 2 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:29,623 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:29,624 INFO L82 PathProgramCache]: Analyzing trace with hash 1811427322, now seen corresponding path program 1 times [2018-11-22 22:30:29,624 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:29,624 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:29,624 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:29,624 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:29,625 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:29,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:29,739 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:29,739 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:29,739 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:29,740 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:29,741 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:29,741 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:29,741 INFO L87 Difference]: Start difference. First operand 231 states and 326 transitions. Second operand 3 states. [2018-11-22 22:30:29,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:29,866 INFO L93 Difference]: Finished difference Result 375 states and 514 transitions. [2018-11-22 22:30:29,867 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:29,867 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-22 22:30:29,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:29,869 INFO L225 Difference]: With dead ends: 375 [2018-11-22 22:30:29,870 INFO L226 Difference]: Without dead ends: 314 [2018-11-22 22:30:29,871 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 3 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:29,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2018-11-22 22:30:29,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 298. [2018-11-22 22:30:29,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 298 states. [2018-11-22 22:30:29,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 408 transitions. [2018-11-22 22:30:29,896 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 408 transitions. Word has length 28 [2018-11-22 22:30:29,896 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:29,896 INFO L480 AbstractCegarLoop]: Abstraction has 298 states and 408 transitions. [2018-11-22 22:30:29,896 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:29,896 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 408 transitions. [2018-11-22 22:30:29,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-11-22 22:30:29,897 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:29,897 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:29,898 INFO L423 AbstractCegarLoop]: === Iteration 3 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:29,898 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:29,898 INFO L82 PathProgramCache]: Analyzing trace with hash 439620198, now seen corresponding path program 1 times [2018-11-22 22:30:29,898 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:29,898 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:29,899 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:29,899 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:29,899 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:29,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:29,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:29,954 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:29,955 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:29,955 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:29,955 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:29,955 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:29,955 INFO L87 Difference]: Start difference. First operand 298 states and 408 transitions. Second operand 3 states. [2018-11-22 22:30:29,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:29,995 INFO L93 Difference]: Finished difference Result 481 states and 640 transitions. [2018-11-22 22:30:29,995 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:29,996 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2018-11-22 22:30:29,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:29,998 INFO L225 Difference]: With dead ends: 481 [2018-11-22 22:30:29,998 INFO L226 Difference]: Without dead ends: 362 [2018-11-22 22:30:29,999 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2018-11-22 22:30:30,018 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 338. [2018-11-22 22:30:30,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 338 states. [2018-11-22 22:30:30,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 459 transitions. [2018-11-22 22:30:30,021 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 459 transitions. Word has length 28 [2018-11-22 22:30:30,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,021 INFO L480 AbstractCegarLoop]: Abstraction has 338 states and 459 transitions. [2018-11-22 22:30:30,021 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:30,021 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 459 transitions. [2018-11-22 22:30:30,023 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-22 22:30:30,023 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,023 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,023 INFO L423 AbstractCegarLoop]: === Iteration 4 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,023 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,023 INFO L82 PathProgramCache]: Analyzing trace with hash -1607848921, now seen corresponding path program 1 times [2018-11-22 22:30:30,023 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,023 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,024 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,024 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,024 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,078 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,079 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:30,079 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:30,079 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:30,079 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,080 INFO L87 Difference]: Start difference. First operand 338 states and 459 transitions. Second operand 3 states. [2018-11-22 22:30:30,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,150 INFO L93 Difference]: Finished difference Result 341 states and 461 transitions. [2018-11-22 22:30:30,150 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:30,150 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 38 [2018-11-22 22:30:30,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,152 INFO L225 Difference]: With dead ends: 341 [2018-11-22 22:30:30,153 INFO L226 Difference]: Without dead ends: 337 [2018-11-22 22:30:30,153 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2018-11-22 22:30:30,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 337. [2018-11-22 22:30:30,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 337 states. [2018-11-22 22:30:30,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 456 transitions. [2018-11-22 22:30:30,167 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 456 transitions. Word has length 38 [2018-11-22 22:30:30,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,167 INFO L480 AbstractCegarLoop]: Abstraction has 337 states and 456 transitions. [2018-11-22 22:30:30,167 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:30,167 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 456 transitions. [2018-11-22 22:30:30,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-22 22:30:30,169 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,169 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,170 INFO L423 AbstractCegarLoop]: === Iteration 5 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,170 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,170 INFO L82 PathProgramCache]: Analyzing trace with hash 1742109340, now seen corresponding path program 1 times [2018-11-22 22:30:30,170 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,170 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,171 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,171 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,171 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,220 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,220 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,221 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-22 22:30:30,221 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-22 22:30:30,221 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-22 22:30:30,221 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-22 22:30:30,221 INFO L87 Difference]: Start difference. First operand 337 states and 456 transitions. Second operand 4 states. [2018-11-22 22:30:30,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,304 INFO L93 Difference]: Finished difference Result 388 states and 513 transitions. [2018-11-22 22:30:30,304 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-22 22:30:30,304 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 46 [2018-11-22 22:30:30,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,306 INFO L225 Difference]: With dead ends: 388 [2018-11-22 22:30:30,306 INFO L226 Difference]: Without dead ends: 319 [2018-11-22 22:30:30,306 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-22 22:30:30,307 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2018-11-22 22:30:30,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 298. [2018-11-22 22:30:30,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 298 states. [2018-11-22 22:30:30,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 399 transitions. [2018-11-22 22:30:30,318 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 399 transitions. Word has length 46 [2018-11-22 22:30:30,318 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,318 INFO L480 AbstractCegarLoop]: Abstraction has 298 states and 399 transitions. [2018-11-22 22:30:30,319 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-22 22:30:30,319 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 399 transitions. [2018-11-22 22:30:30,320 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-22 22:30:30,320 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,321 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,321 INFO L423 AbstractCegarLoop]: === Iteration 6 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,321 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,321 INFO L82 PathProgramCache]: Analyzing trace with hash 750041855, now seen corresponding path program 1 times [2018-11-22 22:30:30,322 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,322 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,322 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,322 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,323 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,362 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,362 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,362 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:30,363 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:30,363 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:30,363 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,363 INFO L87 Difference]: Start difference. First operand 298 states and 399 transitions. Second operand 3 states. [2018-11-22 22:30:30,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,395 INFO L93 Difference]: Finished difference Result 310 states and 414 transitions. [2018-11-22 22:30:30,396 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:30,396 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2018-11-22 22:30:30,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,397 INFO L225 Difference]: With dead ends: 310 [2018-11-22 22:30:30,398 INFO L226 Difference]: Without dead ends: 294 [2018-11-22 22:30:30,398 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-22 22:30:30,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 264. [2018-11-22 22:30:30,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 264 states. [2018-11-22 22:30:30,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 357 transitions. [2018-11-22 22:30:30,410 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 357 transitions. Word has length 45 [2018-11-22 22:30:30,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,410 INFO L480 AbstractCegarLoop]: Abstraction has 264 states and 357 transitions. [2018-11-22 22:30:30,410 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:30,410 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 357 transitions. [2018-11-22 22:30:30,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-22 22:30:30,411 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,411 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,411 INFO L423 AbstractCegarLoop]: === Iteration 7 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,412 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,412 INFO L82 PathProgramCache]: Analyzing trace with hash 1784783245, now seen corresponding path program 1 times [2018-11-22 22:30:30,412 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,412 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,412 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,413 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,413 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,453 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,453 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:30,454 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:30,454 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:30,454 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,454 INFO L87 Difference]: Start difference. First operand 264 states and 357 transitions. Second operand 3 states. [2018-11-22 22:30:30,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,497 INFO L93 Difference]: Finished difference Result 284 states and 378 transitions. [2018-11-22 22:30:30,498 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:30,498 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-22 22:30:30,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,499 INFO L225 Difference]: With dead ends: 284 [2018-11-22 22:30:30,500 INFO L226 Difference]: Without dead ends: 242 [2018-11-22 22:30:30,500 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 242 states. [2018-11-22 22:30:30,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 242 to 242. [2018-11-22 22:30:30,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 242 states. [2018-11-22 22:30:30,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 321 transitions. [2018-11-22 22:30:30,509 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 321 transitions. Word has length 46 [2018-11-22 22:30:30,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,509 INFO L480 AbstractCegarLoop]: Abstraction has 242 states and 321 transitions. [2018-11-22 22:30:30,509 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:30,509 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 321 transitions. [2018-11-22 22:30:30,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-22 22:30:30,510 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,510 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,510 INFO L423 AbstractCegarLoop]: === Iteration 8 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,511 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,511 INFO L82 PathProgramCache]: Analyzing trace with hash 1852297644, now seen corresponding path program 1 times [2018-11-22 22:30:30,511 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,511 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,512 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,512 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,512 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,546 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,546 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,546 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:30,547 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:30,547 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:30,547 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,547 INFO L87 Difference]: Start difference. First operand 242 states and 321 transitions. Second operand 3 states. [2018-11-22 22:30:30,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,589 INFO L93 Difference]: Finished difference Result 270 states and 354 transitions. [2018-11-22 22:30:30,589 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:30,590 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 53 [2018-11-22 22:30:30,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,591 INFO L225 Difference]: With dead ends: 270 [2018-11-22 22:30:30,591 INFO L226 Difference]: Without dead ends: 240 [2018-11-22 22:30:30,592 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2018-11-22 22:30:30,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2018-11-22 22:30:30,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2018-11-22 22:30:30,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 317 transitions. [2018-11-22 22:30:30,601 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 317 transitions. Word has length 53 [2018-11-22 22:30:30,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,602 INFO L480 AbstractCegarLoop]: Abstraction has 240 states and 317 transitions. [2018-11-22 22:30:30,602 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:30,602 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 317 transitions. [2018-11-22 22:30:30,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-22 22:30:30,603 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,603 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,603 INFO L423 AbstractCegarLoop]: === Iteration 9 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,603 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,603 INFO L82 PathProgramCache]: Analyzing trace with hash 1745163498, now seen corresponding path program 1 times [2018-11-22 22:30:30,604 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,604 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,604 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,604 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,604 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,656 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,656 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,656 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-22 22:30:30,656 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-22 22:30:30,657 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-22 22:30:30,657 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:30:30,657 INFO L87 Difference]: Start difference. First operand 240 states and 317 transitions. Second operand 8 states. [2018-11-22 22:30:30,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,760 INFO L93 Difference]: Finished difference Result 252 states and 329 transitions. [2018-11-22 22:30:30,760 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-22 22:30:30,760 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 51 [2018-11-22 22:30:30,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,761 INFO L225 Difference]: With dead ends: 252 [2018-11-22 22:30:30,761 INFO L226 Difference]: Without dead ends: 211 [2018-11-22 22:30:30,762 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-22 22:30:30,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-22 22:30:30,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 211. [2018-11-22 22:30:30,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 211 states. [2018-11-22 22:30:30,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 277 transitions. [2018-11-22 22:30:30,770 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 277 transitions. Word has length 51 [2018-11-22 22:30:30,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,770 INFO L480 AbstractCegarLoop]: Abstraction has 211 states and 277 transitions. [2018-11-22 22:30:30,770 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-22 22:30:30,770 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 277 transitions. [2018-11-22 22:30:30,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-22 22:30:30,771 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,771 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,772 INFO L423 AbstractCegarLoop]: === Iteration 10 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,772 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,772 INFO L82 PathProgramCache]: Analyzing trace with hash 143486070, now seen corresponding path program 1 times [2018-11-22 22:30:30,772 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,772 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,773 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,773 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,773 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,840 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,840 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-22 22:30:30,841 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-22 22:30:30,841 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-22 22:30:30,841 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2018-11-22 22:30:30,841 INFO L87 Difference]: Start difference. First operand 211 states and 277 transitions. Second operand 9 states. [2018-11-22 22:30:30,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,939 INFO L93 Difference]: Finished difference Result 227 states and 293 transitions. [2018-11-22 22:30:30,939 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-22 22:30:30,939 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 52 [2018-11-22 22:30:30,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,940 INFO L225 Difference]: With dead ends: 227 [2018-11-22 22:30:30,940 INFO L226 Difference]: Without dead ends: 206 [2018-11-22 22:30:30,941 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2018-11-22 22:30:30,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2018-11-22 22:30:30,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 206. [2018-11-22 22:30:30,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 206 states. [2018-11-22 22:30:30,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 270 transitions. [2018-11-22 22:30:30,948 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 270 transitions. Word has length 52 [2018-11-22 22:30:30,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,948 INFO L480 AbstractCegarLoop]: Abstraction has 206 states and 270 transitions. [2018-11-22 22:30:30,948 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-22 22:30:30,948 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 270 transitions. [2018-11-22 22:30:30,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-22 22:30:30,950 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,950 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,950 INFO L423 AbstractCegarLoop]: === Iteration 11 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,950 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,951 INFO L82 PathProgramCache]: Analyzing trace with hash 1278878233, now seen corresponding path program 1 times [2018-11-22 22:30:30,951 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,951 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:30,951 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,951 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:30,951 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:30,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:30,975 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:30,975 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:30,975 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 22:30:30,975 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-22 22:30:30,976 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 22:30:30,976 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,976 INFO L87 Difference]: Start difference. First operand 206 states and 270 transitions. Second operand 3 states. [2018-11-22 22:30:30,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:30,989 INFO L93 Difference]: Finished difference Result 246 states and 315 transitions. [2018-11-22 22:30:30,990 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 22:30:30,990 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2018-11-22 22:30:30,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:30,991 INFO L225 Difference]: With dead ends: 246 [2018-11-22 22:30:30,991 INFO L226 Difference]: Without dead ends: 205 [2018-11-22 22:30:30,992 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 22:30:30,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2018-11-22 22:30:30,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 205. [2018-11-22 22:30:30,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 205 states. [2018-11-22 22:30:30,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205 states to 205 states and 265 transitions. [2018-11-22 22:30:30,998 INFO L78 Accepts]: Start accepts. Automaton has 205 states and 265 transitions. Word has length 58 [2018-11-22 22:30:30,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:30,998 INFO L480 AbstractCegarLoop]: Abstraction has 205 states and 265 transitions. [2018-11-22 22:30:30,998 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-22 22:30:30,998 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 265 transitions. [2018-11-22 22:30:30,999 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-22 22:30:30,999 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:30,999 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:30,999 INFO L423 AbstractCegarLoop]: === Iteration 12 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:30,999 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:30,999 INFO L82 PathProgramCache]: Analyzing trace with hash 1933570889, now seen corresponding path program 1 times [2018-11-22 22:30:30,999 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:30,999 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:31,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,000 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:31,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:31,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:31,061 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:31,061 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-22 22:30:31,062 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-22 22:30:31,062 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-22 22:30:31,062 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-22 22:30:31,062 INFO L87 Difference]: Start difference. First operand 205 states and 265 transitions. Second operand 10 states. [2018-11-22 22:30:31,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:31,168 INFO L93 Difference]: Finished difference Result 217 states and 277 transitions. [2018-11-22 22:30:31,169 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-22 22:30:31,169 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 54 [2018-11-22 22:30:31,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:31,170 INFO L225 Difference]: With dead ends: 217 [2018-11-22 22:30:31,170 INFO L226 Difference]: Without dead ends: 203 [2018-11-22 22:30:31,170 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2018-11-22 22:30:31,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2018-11-22 22:30:31,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 203. [2018-11-22 22:30:31,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 203 states. [2018-11-22 22:30:31,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 261 transitions. [2018-11-22 22:30:31,183 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 261 transitions. Word has length 54 [2018-11-22 22:30:31,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:31,184 INFO L480 AbstractCegarLoop]: Abstraction has 203 states and 261 transitions. [2018-11-22 22:30:31,184 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-22 22:30:31,184 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 261 transitions. [2018-11-22 22:30:31,184 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-22 22:30:31,184 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:31,185 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:31,185 INFO L423 AbstractCegarLoop]: === Iteration 13 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:31,185 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:31,185 INFO L82 PathProgramCache]: Analyzing trace with hash -309007876, now seen corresponding path program 1 times [2018-11-22 22:30:31,185 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:31,185 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:31,186 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,186 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:31,186 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:31,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:31,254 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:31,254 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-22 22:30:31,255 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-22 22:30:31,255 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-22 22:30:31,255 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:30:31,255 INFO L87 Difference]: Start difference. First operand 203 states and 261 transitions. Second operand 8 states. [2018-11-22 22:30:31,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:31,491 INFO L93 Difference]: Finished difference Result 351 states and 434 transitions. [2018-11-22 22:30:31,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-22 22:30:31,492 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 53 [2018-11-22 22:30:31,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:31,494 INFO L225 Difference]: With dead ends: 351 [2018-11-22 22:30:31,494 INFO L226 Difference]: Without dead ends: 279 [2018-11-22 22:30:31,494 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=119, Unknown=0, NotChecked=0, Total=156 [2018-11-22 22:30:31,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2018-11-22 22:30:31,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 213. [2018-11-22 22:30:31,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 213 states. [2018-11-22 22:30:31,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 275 transitions. [2018-11-22 22:30:31,506 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 275 transitions. Word has length 53 [2018-11-22 22:30:31,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:31,506 INFO L480 AbstractCegarLoop]: Abstraction has 213 states and 275 transitions. [2018-11-22 22:30:31,506 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-22 22:30:31,506 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 275 transitions. [2018-11-22 22:30:31,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-22 22:30:31,507 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:31,507 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:31,507 INFO L423 AbstractCegarLoop]: === Iteration 14 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:31,507 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:31,508 INFO L82 PathProgramCache]: Analyzing trace with hash -1433722057, now seen corresponding path program 1 times [2018-11-22 22:30:31,508 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:31,508 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:31,508 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,508 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:31,508 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:31,566 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:31,566 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:31,566 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-22 22:30:31,566 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-22 22:30:31,566 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-22 22:30:31,566 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2018-11-22 22:30:31,567 INFO L87 Difference]: Start difference. First operand 213 states and 275 transitions. Second operand 9 states. [2018-11-22 22:30:31,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:31,674 INFO L93 Difference]: Finished difference Result 229 states and 291 transitions. [2018-11-22 22:30:31,674 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-22 22:30:31,674 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 53 [2018-11-22 22:30:31,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:31,675 INFO L225 Difference]: With dead ends: 229 [2018-11-22 22:30:31,675 INFO L226 Difference]: Without dead ends: 191 [2018-11-22 22:30:31,675 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2018-11-22 22:30:31,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2018-11-22 22:30:31,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 191. [2018-11-22 22:30:31,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2018-11-22 22:30:31,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 232 transitions. [2018-11-22 22:30:31,684 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 232 transitions. Word has length 53 [2018-11-22 22:30:31,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:31,684 INFO L480 AbstractCegarLoop]: Abstraction has 191 states and 232 transitions. [2018-11-22 22:30:31,684 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-22 22:30:31,684 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 232 transitions. [2018-11-22 22:30:31,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-22 22:30:31,685 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:31,685 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:31,685 INFO L423 AbstractCegarLoop]: === Iteration 15 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:31,685 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:31,685 INFO L82 PathProgramCache]: Analyzing trace with hash 1317699651, now seen corresponding path program 1 times [2018-11-22 22:30:31,685 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:31,686 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:31,686 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,686 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:31,686 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:31,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:31,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:31,761 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:31,762 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-22 22:30:31,762 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-22 22:30:31,762 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-22 22:30:31,762 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2018-11-22 22:30:31,762 INFO L87 Difference]: Start difference. First operand 191 states and 232 transitions. Second operand 9 states. [2018-11-22 22:30:32,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:32,111 INFO L93 Difference]: Finished difference Result 262 states and 306 transitions. [2018-11-22 22:30:32,111 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-11-22 22:30:32,111 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 54 [2018-11-22 22:30:32,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:32,112 INFO L225 Difference]: With dead ends: 262 [2018-11-22 22:30:32,112 INFO L226 Difference]: Without dead ends: 228 [2018-11-22 22:30:32,113 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 3 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=88, Invalid=292, Unknown=0, NotChecked=0, Total=380 [2018-11-22 22:30:32,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2018-11-22 22:30:32,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 191. [2018-11-22 22:30:32,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2018-11-22 22:30:32,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 230 transitions. [2018-11-22 22:30:32,123 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 230 transitions. Word has length 54 [2018-11-22 22:30:32,123 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:32,124 INFO L480 AbstractCegarLoop]: Abstraction has 191 states and 230 transitions. [2018-11-22 22:30:32,124 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-22 22:30:32,124 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 230 transitions. [2018-11-22 22:30:32,124 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-22 22:30:32,125 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:32,125 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:32,125 INFO L423 AbstractCegarLoop]: === Iteration 16 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:32,125 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:32,125 INFO L82 PathProgramCache]: Analyzing trace with hash -1204113239, now seen corresponding path program 1 times [2018-11-22 22:30:32,125 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:32,125 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:32,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,126 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:32,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:32,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:32,158 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:32,158 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:30:32,158 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:30:32,158 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:30:32,159 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:30:32,159 INFO L87 Difference]: Start difference. First operand 191 states and 230 transitions. Second operand 6 states. [2018-11-22 22:30:32,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:32,194 INFO L93 Difference]: Finished difference Result 235 states and 282 transitions. [2018-11-22 22:30:32,195 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:30:32,195 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 57 [2018-11-22 22:30:32,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:32,196 INFO L225 Difference]: With dead ends: 235 [2018-11-22 22:30:32,196 INFO L226 Difference]: Without dead ends: 199 [2018-11-22 22:30:32,196 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-22 22:30:32,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199 states. [2018-11-22 22:30:32,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199 to 193. [2018-11-22 22:30:32,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 193 states. [2018-11-22 22:30:32,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 231 transitions. [2018-11-22 22:30:32,205 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 231 transitions. Word has length 57 [2018-11-22 22:30:32,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:32,205 INFO L480 AbstractCegarLoop]: Abstraction has 193 states and 231 transitions. [2018-11-22 22:30:32,205 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:30:32,206 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 231 transitions. [2018-11-22 22:30:32,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-22 22:30:32,206 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:32,206 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:32,207 INFO L423 AbstractCegarLoop]: === Iteration 17 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:32,207 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:32,207 INFO L82 PathProgramCache]: Analyzing trace with hash -527681510, now seen corresponding path program 1 times [2018-11-22 22:30:32,207 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:32,207 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:32,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,208 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:32,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:32,255 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:32,255 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:32,255 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-22 22:30:32,255 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-22 22:30:32,256 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-22 22:30:32,256 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-22 22:30:32,256 INFO L87 Difference]: Start difference. First operand 193 states and 231 transitions. Second operand 6 states. [2018-11-22 22:30:32,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:32,297 INFO L93 Difference]: Finished difference Result 204 states and 243 transitions. [2018-11-22 22:30:32,297 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-22 22:30:32,297 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 57 [2018-11-22 22:30:32,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:32,298 INFO L225 Difference]: With dead ends: 204 [2018-11-22 22:30:32,298 INFO L226 Difference]: Without dead ends: 197 [2018-11-22 22:30:32,299 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-11-22 22:30:32,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2018-11-22 22:30:32,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 194. [2018-11-22 22:30:32,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-22 22:30:32,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 232 transitions. [2018-11-22 22:30:32,307 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 232 transitions. Word has length 57 [2018-11-22 22:30:32,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:32,308 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 232 transitions. [2018-11-22 22:30:32,308 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-22 22:30:32,317 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 232 transitions. [2018-11-22 22:30:32,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-22 22:30:32,317 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:32,317 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:32,318 INFO L423 AbstractCegarLoop]: === Iteration 18 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:32,318 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:32,318 INFO L82 PathProgramCache]: Analyzing trace with hash -639520605, now seen corresponding path program 1 times [2018-11-22 22:30:32,318 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:32,318 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:32,319 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,319 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:32,319 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 22:30:32,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 22:30:32,367 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 22:30:32,368 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 22:30:32,368 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-22 22:30:32,368 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 22:30:32,368 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:30:32,368 INFO L87 Difference]: Start difference. First operand 194 states and 232 transitions. Second operand 5 states. [2018-11-22 22:30:32,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 22:30:32,378 INFO L93 Difference]: Finished difference Result 230 states and 273 transitions. [2018-11-22 22:30:32,378 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-22 22:30:32,378 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 58 [2018-11-22 22:30:32,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-22 22:30:32,379 INFO L225 Difference]: With dead ends: 230 [2018-11-22 22:30:32,379 INFO L226 Difference]: Without dead ends: 188 [2018-11-22 22:30:32,380 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 22:30:32,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2018-11-22 22:30:32,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 188. [2018-11-22 22:30:32,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 188 states. [2018-11-22 22:30:32,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 223 transitions. [2018-11-22 22:30:32,386 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 223 transitions. Word has length 58 [2018-11-22 22:30:32,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-22 22:30:32,386 INFO L480 AbstractCegarLoop]: Abstraction has 188 states and 223 transitions. [2018-11-22 22:30:32,386 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-22 22:30:32,387 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 223 transitions. [2018-11-22 22:30:32,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-22 22:30:32,387 INFO L394 BasicCegarLoop]: Found error trace [2018-11-22 22:30:32,387 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 22:30:32,388 INFO L423 AbstractCegarLoop]: === Iteration 19 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-22 22:30:32,388 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 22:30:32,388 INFO L82 PathProgramCache]: Analyzing trace with hash -1656625880, now seen corresponding path program 1 times [2018-11-22 22:30:32,388 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 22:30:32,388 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 22:30:32,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,389 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 22:30:32,389 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 22:30:32,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:30:32,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 22:30:32,431 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~compFptr~0)|=19, |old(~compRegistered~0)|=11, |old(~customIrp~0)|=14, |old(~DC~0)|=7, |old(~DevicePowerState~0)|=20, |old(~Executive~0)|=12, |old(~IPC~0)|=8, |old(~KernelMode~0)|=24, |old(~lowerDriverReturn~0)|=22, |old(~MPR1~0)|=18, |old(~MPR3~0)|=16, |old(~myStatus~0)|=21, |old(~NP~0)|=13, |old(~pended~0)|=23, |old(~setEventCalled~0)|=17, |old(~SKIP1~0)|=15, |old(~SKIP2~0)|=10, |old(~s~0)|=9, |old(~UNLOADED~0)|=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [?] ~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; VAL [|old(~compFptr~0)|=19, |old(~compRegistered~0)|=11, |old(~customIrp~0)|=14, |old(~DC~0)|=7, |old(~DevicePowerState~0)|=20, |old(~Executive~0)|=12, |old(~IPC~0)|=8, |old(~KernelMode~0)|=24, |old(~lowerDriverReturn~0)|=22, |old(~MPR1~0)|=18, |old(~MPR3~0)|=16, |old(~myStatus~0)|=21, |old(~NP~0)|=13, |old(~pended~0)|=23, |old(~setEventCalled~0)|=17, |old(~SKIP1~0)|=15, |old(~SKIP2~0)|=10, |old(~s~0)|=9, |old(~UNLOADED~0)|=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=19, |old(~compRegistered~0)|=11, |old(~customIrp~0)|=14, |old(~DC~0)|=7, |old(~DevicePowerState~0)|=20, |old(~Executive~0)|=12, |old(~IPC~0)|=8, |old(~KernelMode~0)|=24, |old(~lowerDriverReturn~0)|=22, |old(~MPR1~0)|=18, |old(~MPR3~0)|=16, |old(~myStatus~0)|=21, |old(~NP~0)|=13, |old(~pended~0)|=23, |old(~setEventCalled~0)|=17, |old(~SKIP1~0)|=15, |old(~SKIP2~0)|=10, |old(~s~0)|=9, |old(~UNLOADED~0)|=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET #759#return; VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] havoc ~status~1;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;~irp~0 := #t~nondet17;havoc #t~nondet17;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~irp_choice~0 := #t~nondet18;havoc #t~nondet18;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~devobj~0 := #t~nondet19;havoc #t~nondet19;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call _BLAST_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [?] RET #717#return; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [?] assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 == ~irp_choice~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] CALL call stub_driver_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] RET #719#return; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~tmp_ndt_1~0 := #t~nondet20;havoc #t~nondet20; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~tmp_ndt_2~0 := #t~nondet21;havoc #t~nondet21; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_3~0 := #t~nondet22;havoc #t~nondet22; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume 3 == ~tmp_ndt_3~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [|KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~event~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet1;havoc #t~nondet1;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet4;havoc #t~nondet4;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet5;havoc #t~nondet5;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 == ~irpStack__MinorFunction~0); VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(23 == ~irpStack__MinorFunction~0); VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume 2 == ~irpStack__MinorFunction~0; VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] ~devExt__Removed~0 := 1; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] #t~post11 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post11;havoc #t~post11;#t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12;havoc #t~post12; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [|IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~lcontext~0 := #t~nondet30;havoc #t~nondet30;havoc ~__cil_tmp7~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(0 != ~compRegistered~0); VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647;~tmp_ndt_6~0 := #t~nondet32;havoc #t~nondet32; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_6~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647;~tmp_ndt_7~0 := #t~nondet33;havoc #t~nondet33; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume 1 == ~tmp_ndt_7~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] ~returnVal2~0 := -1073741823; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(~s~0 == ~NP~0); VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(~s~0 == ~MPR1~0); VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] #res := ~returnVal2~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=(- 1073741823), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume true; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=(- 1073741823), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] RET #783#return; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |KbFilter_PnP_#t~ret13|=(- 1073741823), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647;havoc #t~ret13;~status~0 := 0; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] #res := ~status~0; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |KbFilter_PnP_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume true; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |KbFilter_PnP_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] RET #725#return; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |main_#t~ret27|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647;~status~1 := #t~ret27;havoc #t~ret27; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(1 == ~pended~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(1 == ~pended~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume ~s~0 != ~UNLOADED~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume -1 != ~status~1; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(~s~0 != ~SKIP2~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(1 == ~pended~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(~s~0 == ~DC~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume ~status~1 != ~lowerDriverReturn~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call errorFn(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !false; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L56-L77] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327-L410] assume ~status~1 >= 0; [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336-L339] assume !(0 == ~irp_choice~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L42-L55] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344-L346] assume !(~status~1 < 0); [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350-L409] assume !(0 == ~tmp_ndt_1~0); [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355-L408] assume !(1 == ~tmp_ndt_2~0); [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360-L407] assume 3 == ~tmp_ndt_3~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105-L288] assume !(0 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108-L287] assume !(23 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111-L286] assume 2 == ~irpStack__MinorFunction~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236-L242] assume ~s~0 == ~NP~0; [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] assume !(0 != ~compRegistered~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503-L526] assume !(0 == ~tmp_ndt_6~0); [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508-L525] assume 1 == ~tmp_ndt_7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527-L549] assume !(~s~0 == ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531-L548] assume !(~s~0 == ~MPR1~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540-L547] assume ~s~0 == ~SKIP1~0; [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L9] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L8] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411-L462] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419-L461] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427-L460] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428-L459] assume -1 != ~status~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429-L458] assume !(~s~0 != ~SKIP2~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439-L457] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446-L456] assume !(~s~0 == ~DC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451-L455] assume ~status~1 != ~lowerDriverReturn~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L56-L77] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327-L410] assume ~status~1 >= 0; [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336-L339] assume !(0 == ~irp_choice~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L42-L55] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344-L346] assume !(~status~1 < 0); [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350-L409] assume !(0 == ~tmp_ndt_1~0); [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355-L408] assume !(1 == ~tmp_ndt_2~0); [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360-L407] assume 3 == ~tmp_ndt_3~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105-L288] assume !(0 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108-L287] assume !(23 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111-L286] assume 2 == ~irpStack__MinorFunction~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236-L242] assume ~s~0 == ~NP~0; [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] assume !(0 != ~compRegistered~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503-L526] assume !(0 == ~tmp_ndt_6~0); [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508-L525] assume 1 == ~tmp_ndt_7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527-L549] assume !(~s~0 == ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531-L548] assume !(~s~0 == ~MPR1~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540-L547] assume ~s~0 == ~SKIP1~0; [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L9] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L8] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411-L462] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419-L461] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427-L460] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428-L459] assume -1 != ~status~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429-L458] assume !(~s~0 != ~SKIP2~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439-L457] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446-L456] assume !(~s~0 == ~DC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451-L455] assume ~status~1 != ~lowerDriverReturn~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L22] int KernelMode ; [L23] int Executive ; [L24] int DevicePowerState ; [L25] int s ; [L26] int UNLOADED ; [L27] int NP ; [L28] int DC ; [L29] int SKIP1 ; [L30] int SKIP2 ; [L31] int MPR1 ; [L32] int MPR3 ; [L33] int IPC ; [L34] int pended ; [L35] int compFptr ; [L36] int compRegistered ; [L37] int lowerDriverReturn ; [L38] int setEventCalled ; [L39] int customIrp ; [L40] int myStatus ; VAL [\old(compFptr)=19, \old(compRegistered)=11, \old(customIrp)=14, \old(DC)=7, \old(DevicePowerState)=20, \old(Executive)=12, \old(IPC)=8, \old(KernelMode)=24, \old(lowerDriverReturn)=22, \old(MPR1)=18, \old(MPR3)=16, \old(myStatus)=21, \old(NP)=13, \old(pended)=23, \old(s)=9, \old(setEventCalled)=17, \old(SKIP1)=15, \old(SKIP2)=10, \old(UNLOADED)=6, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L293] int status ; [L294] int irp = __VERIFIER_nondet_int() ; [L295] int pirp ; [L296] int pirp__IoStatus__Status ; [L297] int irp_choice = __VERIFIER_nondet_int() ; [L298] int devobj = __VERIFIER_nondet_int() ; [L299] int __cil_tmp8 ; [L301] KernelMode = 0 [L302] Executive = 0 [L303] DevicePowerState = 1 [L304] s = 0 [L305] UNLOADED = 0 [L306] NP = 0 [L307] DC = 0 [L308] SKIP1 = 0 [L309] SKIP2 = 0 [L310] MPR1 = 0 [L311] MPR3 = 0 [L312] IPC = 0 [L313] pended = 0 [L314] compFptr = 0 [L315] compRegistered = 0 [L316] lowerDriverReturn = 0 [L317] setEventCalled = 0 [L318] customIrp = 0 [L319] myStatus = 0 [L323] status = 0 [L324] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, UNLOADED=0] [L325] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L60] UNLOADED = 0 [L61] NP = 1 [L62] DC = 2 [L63] SKIP1 = 3 [L64] SKIP2 = 4 [L65] MPR1 = 5 [L66] MPR3 = 6 [L67] IPC = 7 [L68] s = UNLOADED [L69] pended = 0 [L70] compFptr = 0 [L71] compRegistered = 0 [L72] lowerDriverReturn = 0 [L73] setEventCalled = 0 [L74] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L325] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L327] COND TRUE status >= 0 [L328] s = NP [L329] customIrp = 0 [L330] setEventCalled = customIrp [L331] lowerDriverReturn = setEventCalled [L332] compRegistered = lowerDriverReturn [L333] pended = compRegistered [L334] pirp__IoStatus__Status = 0 [L335] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L336] COND FALSE !(irp_choice == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L341] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L46] s = NP [L47] pended = 0 [L48] compFptr = 0 [L49] compRegistered = 0 [L50] lowerDriverReturn = 0 [L51] setEventCalled = 0 [L52] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L341] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L344] COND FALSE !(status < 0) [L348] int tmp_ndt_1; [L349] tmp_ndt_1 = __VERIFIER_nondet_int() [L350] COND FALSE !(tmp_ndt_1 == 0) [L353] int tmp_ndt_2; [L354] tmp_ndt_2 = __VERIFIER_nondet_int() [L355] COND FALSE !(tmp_ndt_2 == 1) [L358] int tmp_ndt_3; [L359] tmp_ndt_3 = __VERIFIER_nondet_int() [L360] COND TRUE tmp_ndt_3 == 3 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L387] CALL, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L79] int devExt ; [L80] int irpStack ; [L81] int status ; [L82] int event = __VERIFIER_nondet_int() ; [L83] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L84] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L85] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L86] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L87] int devExt__Started ; [L88] int devExt__Removed ; [L89] int devExt__SurpriseRemoved ; [L90] int Irp__IoStatus__Status ; [L91] int Irp__IoStatus__Information ; [L92] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L93] int irpSp ; [L94] int nextIrpSp ; [L95] int nextIrpSp__Control ; [L96] int irpSp___0 ; [L97] int irpSp__Context ; [L98] int irpSp__Control ; [L99] long __cil_tmp23 ; [L102] status = 0 [L103] devExt = DeviceObject__DeviceExtension [L104] irpStack = Irp__Tail__Overlay__CurrentStackLocation VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L105] COND FALSE !(irpStack__MinorFunction == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L108] COND FALSE !(irpStack__MinorFunction == 23) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L111] COND TRUE irpStack__MinorFunction == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L235] devExt__Removed = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L236] COND TRUE s == NP [L237] s = SKIP1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L244] Irp__CurrentLocation ++ [L245] Irp__Tail__Overlay__CurrentStackLocation ++ VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L246] CALL IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L482] int returnVal2 ; [L483] int compRetStatus ; [L484] int lcontext = __VERIFIER_nondet_int() ; [L485] long long __cil_tmp7 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L488] COND FALSE !(\read(compRegistered)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L501] int tmp_ndt_6; [L502] tmp_ndt_6 = __VERIFIER_nondet_int() [L503] COND FALSE !(tmp_ndt_6 == 0) [L506] int tmp_ndt_7; [L507] tmp_ndt_7 = __VERIFIER_nondet_int() [L508] COND TRUE tmp_ndt_7 == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L517] returnVal2 = -1073741823 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L527] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L531] COND FALSE !(s == MPR1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L540] COND TRUE s == SKIP1 [L541] s = SKIP2 [L542] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L550] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=-1073741823, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L246] RET IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IofCallDriver(devExt__TopOfStack, Irp)=-1073741823, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L247] status = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L289] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L387] RET, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KbFilter_PnP(devobj, pirp)=0, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L387] status = KbFilter_PnP(devobj, pirp) [L411] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L419] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L427] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L428] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L429] COND FALSE !(s != SKIP2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L439] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L446] COND FALSE !(s == DC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L451] COND TRUE status != lowerDriverReturn VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L452] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L1012] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] ----- [2018-11-22 22:30:33,144 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.11 10:30:33 BoogieIcfgContainer [2018-11-22 22:30:33,145 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-22 22:30:33,145 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-22 22:30:33,145 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-22 22:30:33,145 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-22 22:30:33,146 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 10:30:29" (3/4) ... [2018-11-22 22:30:33,151 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~compFptr~0)|=19, |old(~compRegistered~0)|=11, |old(~customIrp~0)|=14, |old(~DC~0)|=7, |old(~DevicePowerState~0)|=20, |old(~Executive~0)|=12, |old(~IPC~0)|=8, |old(~KernelMode~0)|=24, |old(~lowerDriverReturn~0)|=22, |old(~MPR1~0)|=18, |old(~MPR3~0)|=16, |old(~myStatus~0)|=21, |old(~NP~0)|=13, |old(~pended~0)|=23, |old(~setEventCalled~0)|=17, |old(~SKIP1~0)|=15, |old(~SKIP2~0)|=10, |old(~s~0)|=9, |old(~UNLOADED~0)|=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [?] ~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0; VAL [|old(~compFptr~0)|=19, |old(~compRegistered~0)|=11, |old(~customIrp~0)|=14, |old(~DC~0)|=7, |old(~DevicePowerState~0)|=20, |old(~Executive~0)|=12, |old(~IPC~0)|=8, |old(~KernelMode~0)|=24, |old(~lowerDriverReturn~0)|=22, |old(~MPR1~0)|=18, |old(~MPR3~0)|=16, |old(~myStatus~0)|=21, |old(~NP~0)|=13, |old(~pended~0)|=23, |old(~setEventCalled~0)|=17, |old(~SKIP1~0)|=15, |old(~SKIP2~0)|=10, |old(~s~0)|=9, |old(~UNLOADED~0)|=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=19, |old(~compRegistered~0)|=11, |old(~customIrp~0)|=14, |old(~DC~0)|=7, |old(~DevicePowerState~0)|=20, |old(~Executive~0)|=12, |old(~IPC~0)|=8, |old(~KernelMode~0)|=24, |old(~lowerDriverReturn~0)|=22, |old(~MPR1~0)|=18, |old(~MPR3~0)|=16, |old(~myStatus~0)|=21, |old(~NP~0)|=13, |old(~pended~0)|=23, |old(~setEventCalled~0)|=17, |old(~SKIP1~0)|=15, |old(~SKIP2~0)|=10, |old(~s~0)|=9, |old(~UNLOADED~0)|=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET #759#return; VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] havoc ~status~1;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;~irp~0 := #t~nondet17;havoc #t~nondet17;havoc ~pirp~0;havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~irp_choice~0 := #t~nondet18;havoc #t~nondet18;assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647;~devobj~0 := #t~nondet19;havoc #t~nondet19;havoc ~__cil_tmp8~0;~KernelMode~0 := 0;~Executive~0 := 0;~DevicePowerState~0 := 1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~myStatus~0 := 0;~status~1 := 0;~pirp~0 := ~irp~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call _BLAST_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [?] RET #717#return; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [?] assume ~status~1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 == ~irp_choice~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] CALL call stub_driver_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] ~s~0 := ~NP~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] RET #719#return; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~status~1 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647;~tmp_ndt_1~0 := #t~nondet20;havoc #t~nondet20; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 == ~tmp_ndt_1~0);havoc ~tmp_ndt_2~0;assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647;~tmp_ndt_2~0 := #t~nondet21;havoc #t~nondet21; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(1 == ~tmp_ndt_2~0);havoc ~tmp_ndt_3~0;assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647;~tmp_ndt_3~0 := #t~nondet22;havoc #t~nondet22; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume 3 == ~tmp_ndt_3~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [|KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~devExt~0;havoc ~irpStack~0;havoc ~status~0;assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647;~event~0 := #t~nondet0;havoc #t~nondet0;assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647;~DeviceObject__DeviceExtension~0 := #t~nondet1;havoc #t~nondet1;assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647;~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2;havoc #t~nondet2;assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647;~irpStack__MinorFunction~0 := #t~nondet3;havoc #t~nondet3;assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647;~devExt__TopOfStack~0 := #t~nondet4;havoc #t~nondet4;havoc ~devExt__Started~0;havoc ~devExt__Removed~0;havoc ~devExt__SurpriseRemoved~0;havoc ~Irp__IoStatus__Status~0;havoc ~Irp__IoStatus__Information~0;assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647;~Irp__CurrentLocation~0 := #t~nondet5;havoc #t~nondet5;havoc ~irpSp~0;havoc ~nextIrpSp~0;havoc ~nextIrpSp__Control~0;havoc ~irpSp___0~0;havoc ~irpSp__Context~0;havoc ~irpSp__Control~0;havoc ~__cil_tmp23~0;~status~0 := 0;~devExt~0 := ~DeviceObject__DeviceExtension~0;~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 == ~irpStack__MinorFunction~0); VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume !(23 == ~irpStack__MinorFunction~0); VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume 2 == ~irpStack__MinorFunction~0; VAL [KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] ~devExt__Removed~0 := 1; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [?] assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=0, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=0, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] #t~post11 := ~Irp__CurrentLocation~0;~Irp__CurrentLocation~0 := 1 + #t~post11;havoc #t~post11;#t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0;~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12;havoc #t~post12; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [|IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647;~lcontext~0 := #t~nondet30;havoc #t~nondet30;havoc ~__cil_tmp7~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(0 != ~compRegistered~0); VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] havoc ~tmp_ndt_6~0;assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647;~tmp_ndt_6~0 := #t~nondet32;havoc #t~nondet32; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_6~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(0 == ~tmp_ndt_6~0);havoc ~tmp_ndt_7~0;assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647;~tmp_ndt_7~0 := #t~nondet33;havoc #t~nondet33; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume 1 == ~tmp_ndt_7~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] ~returnVal2~0 := -1073741823; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(~s~0 == ~NP~0); VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume !(~s~0 == ~MPR1~0); VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [?] assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] #res := ~returnVal2~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=(- 1073741823), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume true; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=(- 1073741823), IofCallDriver_~tmp_ndt_6~0=1, IofCallDriver_~tmp_ndt_7~0=1, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=(- 1073741823), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=3, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] RET #783#return; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |KbFilter_PnP_#t~ret13|=(- 1073741823), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647;havoc #t~ret13;~status~0 := 0; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] #res := ~status~0; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |KbFilter_PnP_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume true; VAL [KbFilter_PnP_~devExt__Removed~0=1, KbFilter_PnP_~devExt__TopOfStack~0=0, KbFilter_PnP_~devExt~0=0, KbFilter_PnP_~DeviceObject=0, KbFilter_PnP_~DeviceObject__DeviceExtension~0=0, KbFilter_PnP_~event~0=0, KbFilter_PnP_~Irp=0, KbFilter_PnP_~Irp__CurrentLocation~0=1, KbFilter_PnP_~Irp__Tail__Overlay__CurrentStackLocation~0=1, KbFilter_PnP_~irpStack__MinorFunction~0=2, KbFilter_PnP_~irpStack~0=0, KbFilter_PnP_~status~0=0, |KbFilter_PnP_#in~DeviceObject|=0, |KbFilter_PnP_#in~Irp|=0, |KbFilter_PnP_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] RET #725#return; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |main_#t~ret27|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647;~status~1 := #t~ret27;havoc #t~ret27; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(1 == ~pended~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(1 == ~pended~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume ~s~0 != ~UNLOADED~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume -1 != ~status~1; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(~s~0 != ~SKIP2~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(1 == ~pended~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !(~s~0 == ~DC~0); VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume ~status~1 != ~lowerDriverReturn~0; VAL [main_~devobj~0=0, main_~irp_choice~0=1, main_~irp~0=0, main_~pirp__IoStatus__Status~0=0, main_~pirp~0=0, main_~status~1=0, main_~tmp_ndt_1~0=1, main_~tmp_ndt_2~0=0, main_~tmp_ndt_3~0=3, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call errorFn(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] assume !false; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DevicePowerState~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=(- 1073741823), ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L56-L77] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327-L410] assume ~status~1 >= 0; [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336-L339] assume !(0 == ~irp_choice~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L42-L55] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344-L346] assume !(~status~1 < 0); [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350-L409] assume !(0 == ~tmp_ndt_1~0); [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355-L408] assume !(1 == ~tmp_ndt_2~0); [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360-L407] assume 3 == ~tmp_ndt_3~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105-L288] assume !(0 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108-L287] assume !(23 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111-L286] assume 2 == ~irpStack__MinorFunction~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236-L242] assume ~s~0 == ~NP~0; [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] assume !(0 != ~compRegistered~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503-L526] assume !(0 == ~tmp_ndt_6~0); [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508-L525] assume 1 == ~tmp_ndt_7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527-L549] assume !(~s~0 == ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531-L548] assume !(~s~0 == ~MPR1~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540-L547] assume ~s~0 == ~SKIP1~0; [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L9] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L8] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411-L462] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419-L461] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427-L460] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428-L459] assume -1 != ~status~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429-L458] assume !(~s~0 != ~SKIP2~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439-L457] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446-L456] assume !(~s~0 == ~DC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451-L455] assume ~status~1 != ~lowerDriverReturn~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L56-L77] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327-L410] assume ~status~1 >= 0; [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336-L339] assume !(0 == ~irp_choice~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L42-L55] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344-L346] assume !(~status~1 < 0); [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350-L409] assume !(0 == ~tmp_ndt_1~0); [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355-L408] assume !(1 == ~tmp_ndt_2~0); [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360-L407] assume 3 == ~tmp_ndt_3~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105-L288] assume !(0 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108-L287] assume !(23 == ~irpStack__MinorFunction~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111-L286] assume 2 == ~irpStack__MinorFunction~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236-L242] assume ~s~0 == ~NP~0; [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] assume !(0 != ~compRegistered~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503-L526] assume !(0 == ~tmp_ndt_6~0); [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508-L525] assume 1 == ~tmp_ndt_7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527-L549] assume !(~s~0 == ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531-L548] assume !(~s~0 == ~MPR1~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540-L547] assume ~s~0 == ~SKIP1~0; [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L9] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L8] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411-L462] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419-L461] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427-L460] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428-L459] assume -1 != ~status~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429-L458] assume !(~s~0 != ~SKIP2~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439-L457] assume !(1 == ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446-L456] assume !(~s~0 == ~DC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451-L455] assume ~status~1 != ~lowerDriverReturn~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=19, ~compRegistered~0=11, ~customIrp~0=14, ~DC~0=7, ~DevicePowerState~0=20, ~Executive~0=12, ~IPC~0=8, ~KernelMode~0=24, ~lowerDriverReturn~0=22, ~MPR1~0=18, ~MPR3~0=16, ~myStatus~0=21, ~NP~0=13, ~pended~0=23, ~setEventCalled~0=17, ~SKIP1~0=15, ~SKIP2~0=10, ~s~0=9, ~UNLOADED~0=6] [L22] ~KernelMode~0 := 0; [L23] ~Executive~0 := 0; [L24] ~DevicePowerState~0 := 0; [L25] ~s~0 := 0; [L26] ~UNLOADED~0 := 0; [L27] ~NP~0 := 0; [L28] ~DC~0 := 0; [L29] ~SKIP1~0 := 0; [L30] ~SKIP2~0 := 0; [L31] ~MPR1~0 := 0; [L32] ~MPR3~0 := 0; [L33] ~IPC~0 := 0; [L34] ~pended~0 := 0; [L35] ~compFptr~0 := 0; [L36] ~compRegistered~0 := 0; [L37] ~lowerDriverReturn~0 := 0; [L38] ~setEventCalled~0 := 0; [L39] ~customIrp~0 := 0; [L40] ~myStatus~0 := 0; VAL [old(~compFptr~0)=19, old(~compRegistered~0)=11, old(~customIrp~0)=14, old(~DC~0)=7, old(~DevicePowerState~0)=20, old(~Executive~0)=12, old(~IPC~0)=8, old(~KernelMode~0)=24, old(~lowerDriverReturn~0)=22, old(~MPR1~0)=18, old(~MPR3~0)=16, old(~myStatus~0)=21, old(~NP~0)=13, old(~pended~0)=23, old(~setEventCalled~0)=17, old(~SKIP1~0)=15, old(~SKIP2~0)=10, old(~s~0)=9, old(~UNLOADED~0)=6, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret77 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L293] havoc ~status~1; [L294] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L294] ~irp~0 := #t~nondet17; [L294] havoc #t~nondet17; [L295] havoc ~pirp~0; [L296] havoc ~pirp__IoStatus__Status~0; [L297] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L297] ~irp_choice~0 := #t~nondet18; [L297] havoc #t~nondet18; [L298] assume -2147483648 <= #t~nondet19 && #t~nondet19 <= 2147483647; [L298] ~devobj~0 := #t~nondet19; [L298] havoc #t~nondet19; [L299] havoc ~__cil_tmp8~0; [L301] ~KernelMode~0 := 0; [L302] ~Executive~0 := 0; [L303] ~DevicePowerState~0 := 1; [L304] ~s~0 := 0; [L305] ~UNLOADED~0 := 0; [L306] ~NP~0 := 0; [L307] ~DC~0 := 0; [L308] ~SKIP1~0 := 0; [L309] ~SKIP2~0 := 0; [L310] ~MPR1~0 := 0; [L311] ~MPR3~0 := 0; [L312] ~IPC~0 := 0; [L313] ~pended~0 := 0; [L314] ~compFptr~0 := 0; [L315] ~compRegistered~0 := 0; [L316] ~lowerDriverReturn~0 := 0; [L317] ~setEventCalled~0 := 0; [L318] ~customIrp~0 := 0; [L319] ~myStatus~0 := 0; [L323] ~status~1 := 0; [L324] ~pirp~0 := ~irp~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L325] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~s~0=0, ~UNLOADED~0=0] [L60] ~UNLOADED~0 := 0; [L61] ~NP~0 := 1; [L62] ~DC~0 := 2; [L63] ~SKIP1~0 := 3; [L64] ~SKIP2~0 := 4; [L65] ~MPR1~0 := 5; [L66] ~MPR3~0 := 6; [L67] ~IPC~0 := 7; [L68] ~s~0 := ~UNLOADED~0; [L69] ~pended~0 := 0; [L70] ~compFptr~0 := 0; [L71] ~compRegistered~0 := 0; [L72] ~lowerDriverReturn~0 := 0; [L73] ~setEventCalled~0 := 0; [L74] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=0, ~UNLOADED~0=0] [L325] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=0, ~UNLOADED~0=0] [L327] COND TRUE ~status~1 >= 0 [L328] ~s~0 := ~NP~0; [L329] ~customIrp~0 := 0; [L330] ~setEventCalled~0 := ~customIrp~0; [L331] ~lowerDriverReturn~0 := ~setEventCalled~0; [L332] ~compRegistered~0 := ~lowerDriverReturn~0; [L333] ~pended~0 := ~compRegistered~0; [L334] ~pirp__IoStatus__Status~0 := 0; [L335] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L336] COND FALSE !(0 == ~irp_choice~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L341] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L46] ~s~0 := ~NP~0; [L47] ~pended~0 := 0; [L48] ~compFptr~0 := 0; [L49] ~compRegistered~0 := 0; [L50] ~lowerDriverReturn~0 := 0; [L51] ~setEventCalled~0 := 0; [L52] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L341] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~UNLOADED~0=0] [L344] COND FALSE !(~status~1 < 0) [L348] havoc ~tmp_ndt_1~0; [L349] assume -2147483648 <= #t~nondet20 && #t~nondet20 <= 2147483647; [L349] ~tmp_ndt_1~0 := #t~nondet20; [L349] havoc #t~nondet20; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~UNLOADED~0=0] [L350] COND FALSE !(0 == ~tmp_ndt_1~0) [L353] havoc ~tmp_ndt_2~0; [L354] assume -2147483648 <= #t~nondet21 && #t~nondet21 <= 2147483647; [L354] ~tmp_ndt_2~0 := #t~nondet21; [L354] havoc #t~nondet21; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~UNLOADED~0=0] [L355] COND FALSE !(1 == ~tmp_ndt_2~0) [L358] havoc ~tmp_ndt_3~0; [L359] assume -2147483648 <= #t~nondet22 && #t~nondet22 <= 2147483647; [L359] ~tmp_ndt_3~0 := #t~nondet22; [L359] havoc #t~nondet22; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L360] COND TRUE 3 == ~tmp_ndt_3~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=1, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] CALL call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=1, ~UNLOADED~0=0] [L78-L291] ~DeviceObject := #in~DeviceObject; [L78-L291] ~Irp := #in~Irp; [L79] havoc ~devExt~0; [L80] havoc ~irpStack~0; [L81] havoc ~status~0; [L82] assume -2147483648 <= #t~nondet0 && #t~nondet0 <= 2147483647; [L82] ~event~0 := #t~nondet0; [L82] havoc #t~nondet0; [L83] assume -2147483648 <= #t~nondet1 && #t~nondet1 <= 2147483647; [L83] ~DeviceObject__DeviceExtension~0 := #t~nondet1; [L83] havoc #t~nondet1; [L84] assume -2147483648 <= #t~nondet2 && #t~nondet2 <= 2147483647; [L84] ~Irp__Tail__Overlay__CurrentStackLocation~0 := #t~nondet2; [L84] havoc #t~nondet2; [L85] assume -2147483648 <= #t~nondet3 && #t~nondet3 <= 2147483647; [L85] ~irpStack__MinorFunction~0 := #t~nondet3; [L85] havoc #t~nondet3; [L86] assume -2147483648 <= #t~nondet4 && #t~nondet4 <= 2147483647; [L86] ~devExt__TopOfStack~0 := #t~nondet4; [L86] havoc #t~nondet4; [L87] havoc ~devExt__Started~0; [L88] havoc ~devExt__Removed~0; [L89] havoc ~devExt__SurpriseRemoved~0; [L90] havoc ~Irp__IoStatus__Status~0; [L91] havoc ~Irp__IoStatus__Information~0; [L92] assume -2147483648 <= #t~nondet5 && #t~nondet5 <= 2147483647; [L92] ~Irp__CurrentLocation~0 := #t~nondet5; [L92] havoc #t~nondet5; [L93] havoc ~irpSp~0; [L94] havoc ~nextIrpSp~0; [L95] havoc ~nextIrpSp__Control~0; [L96] havoc ~irpSp___0~0; [L97] havoc ~irpSp__Context~0; [L98] havoc ~irpSp__Control~0; [L99] havoc ~__cil_tmp23~0; [L102] ~status~0 := 0; [L103] ~devExt~0 := ~DeviceObject__DeviceExtension~0; [L104] ~irpStack~0 := ~Irp__Tail__Overlay__CurrentStackLocation~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L105] COND FALSE !(0 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L108] COND FALSE !(23 == ~irpStack__MinorFunction~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L111] COND TRUE 2 == ~irpStack__MinorFunction~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L235] ~devExt__Removed~0 := 1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=1, ~UNLOADED~0=0] [L236] COND TRUE ~s~0 == ~NP~0 [L237] ~s~0 := ~SKIP1~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=0, ~Irp__Tail__Overlay__CurrentStackLocation~0=0, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L244] #t~post11 := ~Irp__CurrentLocation~0; [L244] ~Irp__CurrentLocation~0 := 1 + #t~post11; [L244] havoc #t~post11; [L245] #t~post12 := ~Irp__Tail__Overlay__CurrentStackLocation~0; [L245] ~Irp__Tail__Overlay__CurrentStackLocation~0 := 1 + #t~post12; [L245] havoc #t~post12; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=3, ~UNLOADED~0=0] [L246] CALL call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L480-L552] ~DeviceObject := #in~DeviceObject; [L480-L552] ~Irp := #in~Irp; [L482] havoc ~returnVal2~0; [L483] havoc ~compRetStatus~0; [L484] assume -2147483648 <= #t~nondet30 && #t~nondet30 <= 2147483647; [L484] ~lcontext~0 := #t~nondet30; [L484] havoc #t~nondet30; [L485] havoc ~__cil_tmp7~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L488-L500] COND FALSE !(0 != ~compRegistered~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~UNLOADED~0=0] [L501] havoc ~tmp_ndt_6~0; [L502] assume -2147483648 <= #t~nondet32 && #t~nondet32 <= 2147483647; [L502] ~tmp_ndt_6~0 := #t~nondet32; [L502] havoc #t~nondet32; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~UNLOADED~0=0] [L503] COND FALSE !(0 == ~tmp_ndt_6~0) [L506] havoc ~tmp_ndt_7~0; [L507] assume -2147483648 <= #t~nondet33 && #t~nondet33 <= 2147483647; [L507] ~tmp_ndt_7~0 := #t~nondet33; [L507] havoc #t~nondet33; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L508] COND TRUE 1 == ~tmp_ndt_7~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L517] ~returnVal2~0 := -1073741823; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L527] COND FALSE !(~s~0 == ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L531] COND FALSE !(~s~0 == ~MPR1~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=3, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L540] COND TRUE ~s~0 == ~SKIP1~0 [L541] ~s~0 := ~SKIP2~0; [L542] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L550] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=3, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~returnVal2~0=-1073741823, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~tmp_ndt_6~0=1, ~tmp_ndt_7~0=1, ~UNLOADED~0=0] [L246] RET call #t~ret13 := IofCallDriver(~devExt__TopOfStack~0, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret13=-1073741823, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L246] assume -2147483648 <= #t~ret13 && #t~ret13 <= 2147483647; [L246] havoc #t~ret13; [L247] ~status~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L289] #res := ~status~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~devExt__Removed~0=1, ~devExt__TopOfStack~0=0, ~devExt~0=0, ~DeviceObject=0, ~DeviceObject__DeviceExtension~0=0, ~DevicePowerState~0=1, ~event~0=0, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__CurrentLocation~0=1, ~Irp__Tail__Overlay__CurrentStackLocation~0=1, ~irpStack__MinorFunction~0=2, ~irpStack~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~0=0, ~s~0=4, ~UNLOADED~0=0] [L387] RET call #t~ret27 := KbFilter_PnP(~devobj~0, ~pirp~0); VAL [#t~ret27=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L387] assume -2147483648 <= #t~ret27 && #t~ret27 <= 2147483647; [L387] ~status~1 := #t~ret27; [L387] havoc #t~ret27; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L411] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L419] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L427] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L428] COND TRUE -1 != ~status~1 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L429] COND FALSE !(~s~0 != ~SKIP2~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L439] COND FALSE !(1 == ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L446] COND FALSE !(~s~0 == ~DC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L451] COND TRUE ~status~1 != ~lowerDriverReturn~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~devobj~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=1, ~irp~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~1=0, ~s~0=4, ~tmp_ndt_1~0=1, ~tmp_ndt_2~0=0, ~tmp_ndt_3~0=3, ~UNLOADED~0=0] [L452] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L1012] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DevicePowerState~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DevicePowerState~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=-1073741823, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~s~0=4, ~UNLOADED~0=0] [L22] int KernelMode ; [L23] int Executive ; [L24] int DevicePowerState ; [L25] int s ; [L26] int UNLOADED ; [L27] int NP ; [L28] int DC ; [L29] int SKIP1 ; [L30] int SKIP2 ; [L31] int MPR1 ; [L32] int MPR3 ; [L33] int IPC ; [L34] int pended ; [L35] int compFptr ; [L36] int compRegistered ; [L37] int lowerDriverReturn ; [L38] int setEventCalled ; [L39] int customIrp ; [L40] int myStatus ; VAL [\old(compFptr)=19, \old(compRegistered)=11, \old(customIrp)=14, \old(DC)=7, \old(DevicePowerState)=20, \old(Executive)=12, \old(IPC)=8, \old(KernelMode)=24, \old(lowerDriverReturn)=22, \old(MPR1)=18, \old(MPR3)=16, \old(myStatus)=21, \old(NP)=13, \old(pended)=23, \old(s)=9, \old(setEventCalled)=17, \old(SKIP1)=15, \old(SKIP2)=10, \old(UNLOADED)=6, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L293] int status ; [L294] int irp = __VERIFIER_nondet_int() ; [L295] int pirp ; [L296] int pirp__IoStatus__Status ; [L297] int irp_choice = __VERIFIER_nondet_int() ; [L298] int devobj = __VERIFIER_nondet_int() ; [L299] int __cil_tmp8 ; [L301] KernelMode = 0 [L302] Executive = 0 [L303] DevicePowerState = 1 [L304] s = 0 [L305] UNLOADED = 0 [L306] NP = 0 [L307] DC = 0 [L308] SKIP1 = 0 [L309] SKIP2 = 0 [L310] MPR1 = 0 [L311] MPR3 = 0 [L312] IPC = 0 [L313] pended = 0 [L314] compFptr = 0 [L315] compRegistered = 0 [L316] lowerDriverReturn = 0 [L317] setEventCalled = 0 [L318] customIrp = 0 [L319] myStatus = 0 [L323] status = 0 [L324] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, UNLOADED=0] [L325] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L60] UNLOADED = 0 [L61] NP = 1 [L62] DC = 2 [L63] SKIP1 = 3 [L64] SKIP2 = 4 [L65] MPR1 = 5 [L66] MPR3 = 6 [L67] IPC = 7 [L68] s = UNLOADED [L69] pended = 0 [L70] compFptr = 0 [L71] compRegistered = 0 [L72] lowerDriverReturn = 0 [L73] setEventCalled = 0 [L74] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L325] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L327] COND TRUE status >= 0 [L328] s = NP [L329] customIrp = 0 [L330] setEventCalled = customIrp [L331] lowerDriverReturn = setEventCalled [L332] compRegistered = lowerDriverReturn [L333] pended = compRegistered [L334] pirp__IoStatus__Status = 0 [L335] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L336] COND FALSE !(irp_choice == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L341] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L46] s = NP [L47] pended = 0 [L48] compFptr = 0 [L49] compRegistered = 0 [L50] lowerDriverReturn = 0 [L51] setEventCalled = 0 [L52] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L341] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L344] COND FALSE !(status < 0) [L348] int tmp_ndt_1; [L349] tmp_ndt_1 = __VERIFIER_nondet_int() [L350] COND FALSE !(tmp_ndt_1 == 0) [L353] int tmp_ndt_2; [L354] tmp_ndt_2 = __VERIFIER_nondet_int() [L355] COND FALSE !(tmp_ndt_2 == 1) [L358] int tmp_ndt_3; [L359] tmp_ndt_3 = __VERIFIER_nondet_int() [L360] COND TRUE tmp_ndt_3 == 3 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L387] CALL, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L79] int devExt ; [L80] int irpStack ; [L81] int status ; [L82] int event = __VERIFIER_nondet_int() ; [L83] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L84] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L85] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L86] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L87] int devExt__Started ; [L88] int devExt__Removed ; [L89] int devExt__SurpriseRemoved ; [L90] int Irp__IoStatus__Status ; [L91] int Irp__IoStatus__Information ; [L92] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L93] int irpSp ; [L94] int nextIrpSp ; [L95] int nextIrpSp__Control ; [L96] int irpSp___0 ; [L97] int irpSp__Context ; [L98] int irpSp__Control ; [L99] long __cil_tmp23 ; [L102] status = 0 [L103] devExt = DeviceObject__DeviceExtension [L104] irpStack = Irp__Tail__Overlay__CurrentStackLocation VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L105] COND FALSE !(irpStack__MinorFunction == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L108] COND FALSE !(irpStack__MinorFunction == 23) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L111] COND TRUE irpStack__MinorFunction == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L235] devExt__Removed = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L236] COND TRUE s == NP [L237] s = SKIP1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L244] Irp__CurrentLocation ++ [L245] Irp__Tail__Overlay__CurrentStackLocation ++ VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L246] CALL IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L482] int returnVal2 ; [L483] int compRetStatus ; [L484] int lcontext = __VERIFIER_nondet_int() ; [L485] long long __cil_tmp7 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L488] COND FALSE !(\read(compRegistered)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L501] int tmp_ndt_6; [L502] tmp_ndt_6 = __VERIFIER_nondet_int() [L503] COND FALSE !(tmp_ndt_6 == 0) [L506] int tmp_ndt_7; [L507] tmp_ndt_7 = __VERIFIER_nondet_int() [L508] COND TRUE tmp_ndt_7 == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L517] returnVal2 = -1073741823 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L527] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L531] COND FALSE !(s == MPR1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L540] COND TRUE s == SKIP1 [L541] s = SKIP2 [L542] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L550] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=-1073741823, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L246] RET IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IofCallDriver(devExt__TopOfStack, Irp)=-1073741823, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L247] status = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L289] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L387] RET, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KbFilter_PnP(devobj, pirp)=0, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L387] status = KbFilter_PnP(devobj, pirp) [L411] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L419] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L427] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L428] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L429] COND FALSE !(s != SKIP2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L439] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L446] COND FALSE !(s == DC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L451] COND TRUE status != lowerDriverReturn VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L452] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L1012] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] ----- [2018-11-22 22:30:34,774 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_550a1f72-477d-44fe-bb50-99107d8752e1/bin-2019/uautomizer/witness.graphml [2018-11-22 22:30:34,774 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-22 22:30:34,775 INFO L168 Benchmark]: Toolchain (without parser) took 6443.81 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 314.6 MB). Free memory was 958.0 MB in the beginning and 1.2 GB in the end (delta: -196.3 MB). Peak memory consumption was 118.2 MB. Max. memory is 11.5 GB. [2018-11-22 22:30:34,776 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 22:30:34,776 INFO L168 Benchmark]: CACSL2BoogieTranslator took 275.34 ms. Allocated memory is still 1.0 GB. Free memory was 958.0 MB in the beginning and 933.8 MB in the end (delta: 24.3 MB). Peak memory consumption was 24.3 MB. Max. memory is 11.5 GB. [2018-11-22 22:30:34,776 INFO L168 Benchmark]: Boogie Procedure Inliner took 61.23 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.6 MB). Free memory was 933.8 MB in the beginning and 1.1 GB in the end (delta: -192.6 MB). Peak memory consumption was 15.9 MB. Max. memory is 11.5 GB. [2018-11-22 22:30:34,776 INFO L168 Benchmark]: Boogie Preprocessor took 29.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.4 MB). Peak memory consumption was 3.4 MB. Max. memory is 11.5 GB. [2018-11-22 22:30:34,777 INFO L168 Benchmark]: RCFGBuilder took 558.32 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 73.2 MB). Peak memory consumption was 73.2 MB. Max. memory is 11.5 GB. [2018-11-22 22:30:34,777 INFO L168 Benchmark]: TraceAbstraction took 3887.13 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 181.9 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -165.3 MB). Peak memory consumption was 16.6 MB. Max. memory is 11.5 GB. [2018-11-22 22:30:34,777 INFO L168 Benchmark]: Witness Printer took 1629.26 ms. Allocated memory is still 1.3 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 60.7 MB). Peak memory consumption was 60.7 MB. Max. memory is 11.5 GB. [2018-11-22 22:30:34,779 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 275.34 ms. Allocated memory is still 1.0 GB. Free memory was 958.0 MB in the beginning and 933.8 MB in the end (delta: 24.3 MB). Peak memory consumption was 24.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 61.23 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.6 MB). Free memory was 933.8 MB in the beginning and 1.1 GB in the end (delta: -192.6 MB). Peak memory consumption was 15.9 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 29.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.4 MB). Peak memory consumption was 3.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 558.32 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 73.2 MB). Peak memory consumption was 73.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 3887.13 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 181.9 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -165.3 MB). Peak memory consumption was 16.6 MB. Max. memory is 11.5 GB. * Witness Printer took 1629.26 ms. Allocated memory is still 1.3 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 60.7 MB). Peak memory consumption was 60.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1012]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L22] int KernelMode ; [L23] int Executive ; [L24] int DevicePowerState ; [L25] int s ; [L26] int UNLOADED ; [L27] int NP ; [L28] int DC ; [L29] int SKIP1 ; [L30] int SKIP2 ; [L31] int MPR1 ; [L32] int MPR3 ; [L33] int IPC ; [L34] int pended ; [L35] int compFptr ; [L36] int compRegistered ; [L37] int lowerDriverReturn ; [L38] int setEventCalled ; [L39] int customIrp ; [L40] int myStatus ; VAL [\old(compFptr)=19, \old(compRegistered)=11, \old(customIrp)=14, \old(DC)=7, \old(DevicePowerState)=20, \old(Executive)=12, \old(IPC)=8, \old(KernelMode)=24, \old(lowerDriverReturn)=22, \old(MPR1)=18, \old(MPR3)=16, \old(myStatus)=21, \old(NP)=13, \old(pended)=23, \old(s)=9, \old(setEventCalled)=17, \old(SKIP1)=15, \old(SKIP2)=10, \old(UNLOADED)=6, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L293] int status ; [L294] int irp = __VERIFIER_nondet_int() ; [L295] int pirp ; [L296] int pirp__IoStatus__Status ; [L297] int irp_choice = __VERIFIER_nondet_int() ; [L298] int devobj = __VERIFIER_nondet_int() ; [L299] int __cil_tmp8 ; [L301] KernelMode = 0 [L302] Executive = 0 [L303] DevicePowerState = 1 [L304] s = 0 [L305] UNLOADED = 0 [L306] NP = 0 [L307] DC = 0 [L308] SKIP1 = 0 [L309] SKIP2 = 0 [L310] MPR1 = 0 [L311] MPR3 = 0 [L312] IPC = 0 [L313] pended = 0 [L314] compFptr = 0 [L315] compRegistered = 0 [L316] lowerDriverReturn = 0 [L317] setEventCalled = 0 [L318] customIrp = 0 [L319] myStatus = 0 [L323] status = 0 [L324] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, UNLOADED=0] [L325] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DevicePowerState=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, UNLOADED=0] [L60] UNLOADED = 0 [L61] NP = 1 [L62] DC = 2 [L63] SKIP1 = 3 [L64] SKIP2 = 4 [L65] MPR1 = 5 [L66] MPR3 = 6 [L67] IPC = 7 [L68] s = UNLOADED [L69] pended = 0 [L70] compFptr = 0 [L71] compRegistered = 0 [L72] lowerDriverReturn = 0 [L73] setEventCalled = 0 [L74] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L325] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L327] COND TRUE status >= 0 [L328] s = NP [L329] customIrp = 0 [L330] setEventCalled = customIrp [L331] lowerDriverReturn = setEventCalled [L332] compRegistered = lowerDriverReturn [L333] pended = compRegistered [L334] pirp__IoStatus__Status = 0 [L335] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L336] COND FALSE !(irp_choice == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L341] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L46] s = NP [L47] pended = 0 [L48] compFptr = 0 [L49] compRegistered = 0 [L50] lowerDriverReturn = 0 [L51] setEventCalled = 0 [L52] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L341] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L344] COND FALSE !(status < 0) [L348] int tmp_ndt_1; [L349] tmp_ndt_1 = __VERIFIER_nondet_int() [L350] COND FALSE !(tmp_ndt_1 == 0) [L353] int tmp_ndt_2; [L354] tmp_ndt_2 = __VERIFIER_nondet_int() [L355] COND FALSE !(tmp_ndt_2 == 1) [L358] int tmp_ndt_3; [L359] tmp_ndt_3 = __VERIFIER_nondet_int() [L360] COND TRUE tmp_ndt_3 == 3 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L387] CALL, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L79] int devExt ; [L80] int irpStack ; [L81] int status ; [L82] int event = __VERIFIER_nondet_int() ; [L83] int DeviceObject__DeviceExtension = __VERIFIER_nondet_int() ; [L84] int Irp__Tail__Overlay__CurrentStackLocation = __VERIFIER_nondet_int() ; [L85] int irpStack__MinorFunction = __VERIFIER_nondet_int() ; [L86] int devExt__TopOfStack = __VERIFIER_nondet_int() ; [L87] int devExt__Started ; [L88] int devExt__Removed ; [L89] int devExt__SurpriseRemoved ; [L90] int Irp__IoStatus__Status ; [L91] int Irp__IoStatus__Information ; [L92] int Irp__CurrentLocation = __VERIFIER_nondet_int() ; [L93] int irpSp ; [L94] int nextIrpSp ; [L95] int nextIrpSp__Control ; [L96] int irpSp___0 ; [L97] int irpSp__Context ; [L98] int irpSp__Control ; [L99] long __cil_tmp23 ; [L102] status = 0 [L103] devExt = DeviceObject__DeviceExtension [L104] irpStack = Irp__Tail__Overlay__CurrentStackLocation VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L105] COND FALSE !(irpStack__MinorFunction == 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L108] COND FALSE !(irpStack__MinorFunction == 23) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L111] COND TRUE irpStack__MinorFunction == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L235] devExt__Removed = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L236] COND TRUE s == NP [L237] s = SKIP1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=0, Irp__Tail__Overlay__CurrentStackLocation=0, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L244] Irp__CurrentLocation ++ [L245] Irp__Tail__Overlay__CurrentStackLocation ++ VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L246] CALL IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L482] int returnVal2 ; [L483] int compRetStatus ; [L484] int lcontext = __VERIFIER_nondet_int() ; [L485] long long __cil_tmp7 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L488] COND FALSE !(\read(compRegistered)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L501] int tmp_ndt_6; [L502] tmp_ndt_6 = __VERIFIER_nondet_int() [L503] COND FALSE !(tmp_ndt_6 == 0) [L506] int tmp_ndt_7; [L507] tmp_ndt_7 = __VERIFIER_nondet_int() [L508] COND TRUE tmp_ndt_7 == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L517] returnVal2 = -1073741823 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L527] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L531] COND FALSE !(s == MPR1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=3, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L540] COND TRUE s == SKIP1 [L541] s = SKIP2 [L542] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L550] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=3, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=-1073741823, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceObject=0, DevicePowerState=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lcontext=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, returnVal2=-1073741823, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, tmp_ndt_6=1, tmp_ndt_7=1, UNLOADED=0] [L246] RET IofCallDriver(devExt__TopOfStack, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IofCallDriver(devExt__TopOfStack, Irp)=-1073741823, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L247] status = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L289] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, devExt=0, devExt__Removed=1, devExt__TopOfStack=0, DeviceObject=0, DeviceObject__DeviceExtension=0, DevicePowerState=1, event=0, Executive=0, IPC=7, Irp=0, Irp__CurrentLocation=1, Irp__Tail__Overlay__CurrentStackLocation=1, irpStack=0, irpStack__MinorFunction=2, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, UNLOADED=0] [L387] RET, EXPR KbFilter_PnP(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KbFilter_PnP(devobj, pirp)=0, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L387] status = KbFilter_PnP(devobj, pirp) [L411] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L419] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L427] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L428] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L429] COND FALSE !(s != SKIP2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L439] COND FALSE !(pended == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L446] COND FALSE !(s == DC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L451] COND TRUE status != lowerDriverReturn VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=1, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, tmp_ndt_1=1, tmp_ndt_2=0, tmp_ndt_3=3, UNLOADED=0] [L452] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] [L1012] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DevicePowerState)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DevicePowerState=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=-1073741823, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, s=4, setEventCalled=0, SKIP1=3, SKIP2=4, UNLOADED=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 18 procedures, 252 locations, 1 error locations. UNSAFE Result, 3.8s OverallTime, 19 OverallIterations, 1 TraceHistogramMax, 1.6s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 4674 SDtfs, 2081 SDslu, 11271 SDs, 0 SdLazy, 1648 SolverSat, 254 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 134 GetRequests, 42 SyntacticMatches, 5 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 59 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=338occurred in iteration=3, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 18 MinimizatonAttempts, 203 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 907 NumberOfCodeBlocks, 907 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 833 ConstructedInterpolants, 0 QuantifiedInterpolants, 63203 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 18 InterpolantComputations, 18 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...