./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c60fa6dcffe947607e07f04cc37f17d0aae2288e ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 12:44:27,850 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 12:44:27,852 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 12:44:27,858 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 12:44:27,859 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 12:44:27,859 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 12:44:27,860 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 12:44:27,861 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 12:44:27,862 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 12:44:27,863 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 12:44:27,864 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 12:44:27,864 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 12:44:27,864 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 12:44:27,865 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 12:44:27,865 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 12:44:27,866 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 12:44:27,866 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 12:44:27,868 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 12:44:27,869 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 12:44:27,869 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 12:44:27,870 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 12:44:27,871 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 12:44:27,872 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 12:44:27,873 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 12:44:27,873 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 12:44:27,873 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 12:44:27,874 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 12:44:27,874 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 12:44:27,875 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 12:44:27,875 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 12:44:27,876 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 12:44:27,876 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 12:44:27,876 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 12:44:27,876 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 12:44:27,877 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 12:44:27,877 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 12:44:27,878 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2018-11-23 12:44:27,888 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 12:44:27,888 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 12:44:27,889 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 12:44:27,889 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 12:44:27,889 INFO L133 SettingsManager]: * User list type=DISABLED [2018-11-23 12:44:27,889 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-11-23 12:44:27,889 INFO L133 SettingsManager]: * Explicit value domain=true [2018-11-23 12:44:27,889 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2018-11-23 12:44:27,889 INFO L133 SettingsManager]: * Octagon Domain=false [2018-11-23 12:44:27,890 INFO L133 SettingsManager]: * Abstract domain=CompoundDomain [2018-11-23 12:44:27,890 INFO L133 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2018-11-23 12:44:27,890 INFO L133 SettingsManager]: * Use the RCFG-of-the-future interface=true [2018-11-23 12:44:27,890 INFO L133 SettingsManager]: * Interval Domain=false [2018-11-23 12:44:27,890 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 12:44:27,891 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 12:44:27,892 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 12:44:27,892 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 12:44:27,892 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 12:44:27,892 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 12:44:27,892 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 12:44:27,892 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 12:44:27,892 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 12:44:27,893 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:44:27,893 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 12:44:27,893 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 12:44:27,893 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 12:44:27,893 INFO L133 SettingsManager]: * Trace refinement strategy=TAIPAN [2018-11-23 12:44:27,893 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 12:44:27,893 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 12:44:27,893 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 12:44:27,894 INFO L133 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c60fa6dcffe947607e07f04cc37f17d0aae2288e [2018-11-23 12:44:27,920 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 12:44:27,929 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 12:44:27,931 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 12:44:27,933 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 12:44:27,933 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 12:44:27,933 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/../../sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-23 12:44:27,978 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/data/a15b9ba4c/b0177d5689d440a3ad2516af6c56de86/FLAG81219fbf5 [2018-11-23 12:44:28,448 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 12:44:28,449 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/sv-benchmarks/c/ntdrivers-simplified/cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-23 12:44:28,458 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/data/a15b9ba4c/b0177d5689d440a3ad2516af6c56de86/FLAG81219fbf5 [2018-11-23 12:44:28,951 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/data/a15b9ba4c/b0177d5689d440a3ad2516af6c56de86 [2018-11-23 12:44:28,953 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 12:44:28,954 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 12:44:28,954 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 12:44:28,955 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 12:44:28,957 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 12:44:28,957 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:44:28" (1/1) ... [2018-11-23 12:44:28,959 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16069910 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:28, skipping insertion in model container [2018-11-23 12:44:28,959 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:44:28" (1/1) ... [2018-11-23 12:44:28,965 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 12:44:29,006 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 12:44:29,257 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:44:29,259 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 12:44:29,397 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:44:29,410 INFO L195 MainTranslator]: Completed translation [2018-11-23 12:44:29,410 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29 WrapperNode [2018-11-23 12:44:29,410 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 12:44:29,411 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 12:44:29,411 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 12:44:29,411 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 12:44:29,416 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,431 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,438 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 12:44:29,438 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 12:44:29,439 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 12:44:29,439 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 12:44:29,447 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,447 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,452 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,453 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,474 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,485 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,490 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... [2018-11-23 12:44:29,498 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 12:44:29,498 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 12:44:29,498 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 12:44:29,499 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 12:44:29,499 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:44:29,556 INFO L130 BoogieDeclarations]: Found specification of procedure SendSrbSynchronous [2018-11-23 12:44:29,556 INFO L138 BoogieDeclarations]: Found implementation of procedure SendSrbSynchronous [2018-11-23 12:44:29,556 INFO L130 BoogieDeclarations]: Found specification of procedure _BLAST_init [2018-11-23 12:44:29,556 INFO L138 BoogieDeclarations]: Found implementation of procedure _BLAST_init [2018-11-23 12:44:29,556 INFO L130 BoogieDeclarations]: Found specification of procedure AG_SetStatusAndReturn [2018-11-23 12:44:29,556 INFO L138 BoogieDeclarations]: Found implementation of procedure AG_SetStatusAndReturn [2018-11-23 12:44:29,557 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioStartDevice [2018-11-23 12:44:29,557 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioStartDevice [2018-11-23 12:44:29,557 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 12:44:29,557 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 12:44:29,557 INFO L130 BoogieDeclarations]: Found specification of procedure stubMoreProcessingRequired [2018-11-23 12:44:29,557 INFO L138 BoogieDeclarations]: Found implementation of procedure stubMoreProcessingRequired [2018-11-23 12:44:29,557 INFO L130 BoogieDeclarations]: Found specification of procedure PoCallDriver [2018-11-23 12:44:29,557 INFO L138 BoogieDeclarations]: Found implementation of procedure PoCallDriver [2018-11-23 12:44:29,558 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioIsPlayActive [2018-11-23 12:44:29,558 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioIsPlayActive [2018-11-23 12:44:29,558 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2018-11-23 12:44:29,558 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2018-11-23 12:44:29,558 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioHPCdrDeviceControl [2018-11-23 12:44:29,558 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioHPCdrDeviceControl [2018-11-23 12:44:29,558 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2018-11-23 12:44:29,558 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2018-11-23 12:44:29,558 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioPower [2018-11-23 12:44:29,559 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioPower [2018-11-23 12:44:29,559 INFO L130 BoogieDeclarations]: Found specification of procedure HPCdrCompletion [2018-11-23 12:44:29,559 INFO L138 BoogieDeclarations]: Found implementation of procedure HPCdrCompletion [2018-11-23 12:44:29,559 INFO L130 BoogieDeclarations]: Found specification of procedure HpCdrProcessLastSession [2018-11-23 12:44:29,559 INFO L138 BoogieDeclarations]: Found implementation of procedure HpCdrProcessLastSession [2018-11-23 12:44:29,559 INFO L130 BoogieDeclarations]: Found specification of procedure KeSetEvent [2018-11-23 12:44:29,559 INFO L138 BoogieDeclarations]: Found implementation of procedure KeSetEvent [2018-11-23 12:44:29,559 INFO L130 BoogieDeclarations]: Found specification of procedure stub_driver_init [2018-11-23 12:44:29,559 INFO L138 BoogieDeclarations]: Found implementation of procedure stub_driver_init [2018-11-23 12:44:29,559 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioPnp [2018-11-23 12:44:29,560 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioPnp [2018-11-23 12:44:29,560 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioSignalCompletion [2018-11-23 12:44:29,560 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioSignalCompletion [2018-11-23 12:44:29,560 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2018-11-23 12:44:29,560 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2018-11-23 12:44:29,560 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudio535DeviceControl [2018-11-23 12:44:29,560 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudio535DeviceControl [2018-11-23 12:44:29,560 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2018-11-23 12:44:29,560 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2018-11-23 12:44:29,561 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioSendToNextDriver [2018-11-23 12:44:29,561 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioSendToNextDriver [2018-11-23 12:44:29,561 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 12:44:29,561 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 12:44:29,561 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioAtapiDeviceControl [2018-11-23 12:44:29,561 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioAtapiDeviceControl [2018-11-23 12:44:29,561 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioDeviceControl [2018-11-23 12:44:29,561 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioDeviceControl [2018-11-23 12:44:29,561 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 12:44:29,561 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 12:44:29,562 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudio435DeviceControl [2018-11-23 12:44:29,562 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudio435DeviceControl [2018-11-23 12:44:29,562 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioUnload [2018-11-23 12:44:29,562 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioUnload [2018-11-23 12:44:29,562 INFO L130 BoogieDeclarations]: Found specification of procedure CdAudioForwardIrpSynchronous [2018-11-23 12:44:29,562 INFO L138 BoogieDeclarations]: Found implementation of procedure CdAudioForwardIrpSynchronous [2018-11-23 12:44:29,562 INFO L130 BoogieDeclarations]: Found specification of procedure ZwClose [2018-11-23 12:44:29,562 INFO L138 BoogieDeclarations]: Found implementation of procedure ZwClose [2018-11-23 12:44:29,950 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:29,951 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,012 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,012 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,055 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,055 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,133 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,133 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,201 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,201 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,352 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,352 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,387 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,388 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,402 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,402 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,538 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:44:30,538 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:44:30,555 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 12:44:30,555 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 12:44:30,555 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:44:30 BoogieIcfgContainer [2018-11-23 12:44:30,555 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 12:44:30,556 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 12:44:30,556 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 12:44:30,558 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 12:44:30,558 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:44:28" (1/3) ... [2018-11-23 12:44:30,559 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c343c54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:44:30, skipping insertion in model container [2018-11-23 12:44:30,559 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:44:29" (2/3) ... [2018-11-23 12:44:30,559 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c343c54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:44:30, skipping insertion in model container [2018-11-23 12:44:30,559 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:44:30" (3/3) ... [2018-11-23 12:44:30,561 INFO L112 eAbstractionObserver]: Analyzing ICFG cdaudio_simpl1_false-unreach-call_true-valid-memsafety_true-termination.cil.c [2018-11-23 12:44:30,567 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 12:44:30,573 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 12:44:30,584 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 12:44:30,610 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 12:44:30,610 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 12:44:30,613 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 12:44:30,613 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 12:44:30,613 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 12:44:30,613 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 12:44:30,613 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 12:44:30,613 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 12:44:30,640 INFO L276 IsEmpty]: Start isEmpty. Operand 517 states. [2018-11-23 12:44:30,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2018-11-23 12:44:30,645 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:30,646 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:30,648 INFO L423 AbstractCegarLoop]: === Iteration 1 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:30,652 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:30,653 INFO L82 PathProgramCache]: Analyzing trace with hash 1098408584, now seen corresponding path program 1 times [2018-11-23 12:44:30,654 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:30,689 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:30,689 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:30,689 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:30,689 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:30,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:30,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:30,843 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:30,843 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:30,843 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:30,848 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:30,859 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:30,860 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:30,864 INFO L87 Difference]: Start difference. First operand 517 states. Second operand 3 states. [2018-11-23 12:44:31,016 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:31,016 INFO L93 Difference]: Finished difference Result 891 states and 1381 transitions. [2018-11-23 12:44:31,016 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:31,018 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2018-11-23 12:44:31,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:31,028 INFO L225 Difference]: With dead ends: 891 [2018-11-23 12:44:31,028 INFO L226 Difference]: Without dead ends: 509 [2018-11-23 12:44:31,033 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:31,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 509 states. [2018-11-23 12:44:31,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 509 to 509. [2018-11-23 12:44:31,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 509 states. [2018-11-23 12:44:31,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 509 states to 509 states and 740 transitions. [2018-11-23 12:44:31,097 INFO L78 Accepts]: Start accepts. Automaton has 509 states and 740 transitions. Word has length 20 [2018-11-23 12:44:31,097 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:31,098 INFO L480 AbstractCegarLoop]: Abstraction has 509 states and 740 transitions. [2018-11-23 12:44:31,098 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:31,098 INFO L276 IsEmpty]: Start isEmpty. Operand 509 states and 740 transitions. [2018-11-23 12:44:31,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-11-23 12:44:31,099 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:31,099 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:31,099 INFO L423 AbstractCegarLoop]: === Iteration 2 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:31,100 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:31,100 INFO L82 PathProgramCache]: Analyzing trace with hash -1051395834, now seen corresponding path program 1 times [2018-11-23 12:44:31,100 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:31,101 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,101 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:31,101 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,101 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:31,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:31,207 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:31,207 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:31,207 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:31,208 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:31,209 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:31,209 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:31,209 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:31,210 INFO L87 Difference]: Start difference. First operand 509 states and 740 transitions. Second operand 3 states. [2018-11-23 12:44:31,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:31,415 INFO L93 Difference]: Finished difference Result 795 states and 1126 transitions. [2018-11-23 12:44:31,415 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:31,415 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2018-11-23 12:44:31,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:31,421 INFO L225 Difference]: With dead ends: 795 [2018-11-23 12:44:31,421 INFO L226 Difference]: Without dead ends: 674 [2018-11-23 12:44:31,422 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 2 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:31,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 674 states. [2018-11-23 12:44:31,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 674 to 654. [2018-11-23 12:44:31,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 654 states. [2018-11-23 12:44:31,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 654 states to 654 states and 934 transitions. [2018-11-23 12:44:31,456 INFO L78 Accepts]: Start accepts. Automaton has 654 states and 934 transitions. Word has length 25 [2018-11-23 12:44:31,456 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:31,456 INFO L480 AbstractCegarLoop]: Abstraction has 654 states and 934 transitions. [2018-11-23 12:44:31,456 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:31,456 INFO L276 IsEmpty]: Start isEmpty. Operand 654 states and 934 transitions. [2018-11-23 12:44:31,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2018-11-23 12:44:31,457 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:31,458 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:31,458 INFO L423 AbstractCegarLoop]: === Iteration 3 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:31,458 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:31,458 INFO L82 PathProgramCache]: Analyzing trace with hash 880506904, now seen corresponding path program 1 times [2018-11-23 12:44:31,458 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:31,459 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,459 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:31,459 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,459 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:31,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:31,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:31,518 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:31,518 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:31,518 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:31,519 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:31,519 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:31,519 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:31,519 INFO L87 Difference]: Start difference. First operand 654 states and 934 transitions. Second operand 3 states. [2018-11-23 12:44:31,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:31,561 INFO L93 Difference]: Finished difference Result 1001 states and 1387 transitions. [2018-11-23 12:44:31,562 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:31,562 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 30 [2018-11-23 12:44:31,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:31,566 INFO L225 Difference]: With dead ends: 1001 [2018-11-23 12:44:31,566 INFO L226 Difference]: Without dead ends: 823 [2018-11-23 12:44:31,567 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:31,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 823 states. [2018-11-23 12:44:31,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 823 to 769. [2018-11-23 12:44:31,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 769 states. [2018-11-23 12:44:31,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 769 states to 769 states and 1094 transitions. [2018-11-23 12:44:31,600 INFO L78 Accepts]: Start accepts. Automaton has 769 states and 1094 transitions. Word has length 30 [2018-11-23 12:44:31,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:31,600 INFO L480 AbstractCegarLoop]: Abstraction has 769 states and 1094 transitions. [2018-11-23 12:44:31,600 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:31,600 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 1094 transitions. [2018-11-23 12:44:31,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2018-11-23 12:44:31,602 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:31,602 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:31,602 INFO L423 AbstractCegarLoop]: === Iteration 4 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:31,603 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:31,603 INFO L82 PathProgramCache]: Analyzing trace with hash -2133514060, now seen corresponding path program 1 times [2018-11-23 12:44:31,603 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:31,604 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,604 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:31,604 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,604 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:31,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:31,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:31,638 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:31,638 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:31,638 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:31,638 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:31,639 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:31,639 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:31,639 INFO L87 Difference]: Start difference. First operand 769 states and 1094 transitions. Second operand 3 states. [2018-11-23 12:44:31,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:31,865 INFO L93 Difference]: Finished difference Result 1430 states and 2101 transitions. [2018-11-23 12:44:31,866 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:31,866 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 31 [2018-11-23 12:44:31,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:31,872 INFO L225 Difference]: With dead ends: 1430 [2018-11-23 12:44:31,872 INFO L226 Difference]: Without dead ends: 1164 [2018-11-23 12:44:31,873 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:31,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1164 states. [2018-11-23 12:44:31,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1164 to 901. [2018-11-23 12:44:31,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 901 states. [2018-11-23 12:44:31,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 901 states to 901 states and 1326 transitions. [2018-11-23 12:44:31,919 INFO L78 Accepts]: Start accepts. Automaton has 901 states and 1326 transitions. Word has length 31 [2018-11-23 12:44:31,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:31,919 INFO L480 AbstractCegarLoop]: Abstraction has 901 states and 1326 transitions. [2018-11-23 12:44:31,919 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:31,920 INFO L276 IsEmpty]: Start isEmpty. Operand 901 states and 1326 transitions. [2018-11-23 12:44:31,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2018-11-23 12:44:31,921 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:31,921 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:31,922 INFO L423 AbstractCegarLoop]: === Iteration 5 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:31,922 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:31,922 INFO L82 PathProgramCache]: Analyzing trace with hash -1952820015, now seen corresponding path program 1 times [2018-11-23 12:44:31,922 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:31,923 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,923 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:31,923 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:31,923 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:31,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:32,012 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:32,012 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:32,012 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:32,012 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:32,013 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:32,013 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:32,013 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:32,013 INFO L87 Difference]: Start difference. First operand 901 states and 1326 transitions. Second operand 5 states. [2018-11-23 12:44:32,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:32,607 INFO L93 Difference]: Finished difference Result 1570 states and 2317 transitions. [2018-11-23 12:44:32,607 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 12:44:32,607 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2018-11-23 12:44:32,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:32,611 INFO L225 Difference]: With dead ends: 1570 [2018-11-23 12:44:32,611 INFO L226 Difference]: Without dead ends: 990 [2018-11-23 12:44:32,612 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:44:32,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 990 states. [2018-11-23 12:44:32,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 990 to 889. [2018-11-23 12:44:32,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 889 states. [2018-11-23 12:44:32,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 889 states to 889 states and 1302 transitions. [2018-11-23 12:44:32,641 INFO L78 Accepts]: Start accepts. Automaton has 889 states and 1302 transitions. Word has length 32 [2018-11-23 12:44:32,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:32,641 INFO L480 AbstractCegarLoop]: Abstraction has 889 states and 1302 transitions. [2018-11-23 12:44:32,641 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:32,642 INFO L276 IsEmpty]: Start isEmpty. Operand 889 states and 1302 transitions. [2018-11-23 12:44:32,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2018-11-23 12:44:32,643 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:32,643 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:32,644 INFO L423 AbstractCegarLoop]: === Iteration 6 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:32,644 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:32,644 INFO L82 PathProgramCache]: Analyzing trace with hash -950761943, now seen corresponding path program 1 times [2018-11-23 12:44:32,644 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:32,645 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:32,645 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:32,645 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:32,645 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:32,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:32,705 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:32,706 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:32,706 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:32,706 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:32,706 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:32,706 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:32,706 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:32,706 INFO L87 Difference]: Start difference. First operand 889 states and 1302 transitions. Second operand 3 states. [2018-11-23 12:44:32,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:32,756 INFO L93 Difference]: Finished difference Result 892 states and 1304 transitions. [2018-11-23 12:44:32,757 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:32,757 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2018-11-23 12:44:32,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:32,759 INFO L225 Difference]: With dead ends: 892 [2018-11-23 12:44:32,760 INFO L226 Difference]: Without dead ends: 888 [2018-11-23 12:44:32,760 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:32,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 888 states. [2018-11-23 12:44:32,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 888 to 888. [2018-11-23 12:44:32,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 888 states. [2018-11-23 12:44:32,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 888 states to 888 states and 1299 transitions. [2018-11-23 12:44:32,786 INFO L78 Accepts]: Start accepts. Automaton has 888 states and 1299 transitions. Word has length 36 [2018-11-23 12:44:32,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:32,786 INFO L480 AbstractCegarLoop]: Abstraction has 888 states and 1299 transitions. [2018-11-23 12:44:32,787 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:32,787 INFO L276 IsEmpty]: Start isEmpty. Operand 888 states and 1299 transitions. [2018-11-23 12:44:32,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-11-23 12:44:32,788 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:32,788 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:32,788 INFO L423 AbstractCegarLoop]: === Iteration 7 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:32,788 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:32,789 INFO L82 PathProgramCache]: Analyzing trace with hash -826026373, now seen corresponding path program 1 times [2018-11-23 12:44:32,789 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:32,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:32,789 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:32,789 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:32,790 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:32,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:32,821 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:32,822 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:32,822 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:32,822 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:32,822 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:32,822 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:32,822 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:32,823 INFO L87 Difference]: Start difference. First operand 888 states and 1299 transitions. Second operand 3 states. [2018-11-23 12:44:32,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:32,864 INFO L93 Difference]: Finished difference Result 1280 states and 1824 transitions. [2018-11-23 12:44:32,865 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:32,865 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 39 [2018-11-23 12:44:32,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:32,868 INFO L225 Difference]: With dead ends: 1280 [2018-11-23 12:44:32,868 INFO L226 Difference]: Without dead ends: 1019 [2018-11-23 12:44:32,869 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:32,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1019 states. [2018-11-23 12:44:32,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1019 to 874. [2018-11-23 12:44:32,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 874 states. [2018-11-23 12:44:32,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 874 states to 874 states and 1241 transitions. [2018-11-23 12:44:32,898 INFO L78 Accepts]: Start accepts. Automaton has 874 states and 1241 transitions. Word has length 39 [2018-11-23 12:44:32,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:32,898 INFO L480 AbstractCegarLoop]: Abstraction has 874 states and 1241 transitions. [2018-11-23 12:44:32,898 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:32,898 INFO L276 IsEmpty]: Start isEmpty. Operand 874 states and 1241 transitions. [2018-11-23 12:44:32,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-11-23 12:44:32,899 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:32,899 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:32,899 INFO L423 AbstractCegarLoop]: === Iteration 8 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:32,900 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:32,900 INFO L82 PathProgramCache]: Analyzing trace with hash 1085841368, now seen corresponding path program 1 times [2018-11-23 12:44:32,900 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:32,900 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:32,900 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:32,901 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:32,901 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:32,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:32,938 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:32,939 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:32,939 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:32,939 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:32,939 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:32,939 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:32,939 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:32,940 INFO L87 Difference]: Start difference. First operand 874 states and 1241 transitions. Second operand 3 states. [2018-11-23 12:44:32,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:32,991 INFO L93 Difference]: Finished difference Result 976 states and 1369 transitions. [2018-11-23 12:44:32,992 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:32,992 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 40 [2018-11-23 12:44:32,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:32,995 INFO L225 Difference]: With dead ends: 976 [2018-11-23 12:44:32,995 INFO L226 Difference]: Without dead ends: 956 [2018-11-23 12:44:32,996 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 5 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:32,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 956 states. [2018-11-23 12:44:33,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 956 to 900. [2018-11-23 12:44:33,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 900 states. [2018-11-23 12:44:33,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1276 transitions. [2018-11-23 12:44:33,033 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1276 transitions. Word has length 40 [2018-11-23 12:44:33,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:33,034 INFO L480 AbstractCegarLoop]: Abstraction has 900 states and 1276 transitions. [2018-11-23 12:44:33,034 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:33,034 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1276 transitions. [2018-11-23 12:44:33,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-23 12:44:33,036 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:33,036 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:33,036 INFO L423 AbstractCegarLoop]: === Iteration 9 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:33,036 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:33,037 INFO L82 PathProgramCache]: Analyzing trace with hash 215600759, now seen corresponding path program 1 times [2018-11-23 12:44:33,037 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:33,037 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,037 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:33,038 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,038 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:33,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:33,074 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:33,074 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:33,075 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:33,075 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:33,075 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:33,075 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:33,075 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:33,076 INFO L87 Difference]: Start difference. First operand 900 states and 1276 transitions. Second operand 3 states. [2018-11-23 12:44:33,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:33,134 INFO L93 Difference]: Finished difference Result 1175 states and 1651 transitions. [2018-11-23 12:44:33,135 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:33,135 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-23 12:44:33,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:33,138 INFO L225 Difference]: With dead ends: 1175 [2018-11-23 12:44:33,138 INFO L226 Difference]: Without dead ends: 933 [2018-11-23 12:44:33,139 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:33,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 933 states. [2018-11-23 12:44:33,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 933 to 900. [2018-11-23 12:44:33,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 900 states. [2018-11-23 12:44:33,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1275 transitions. [2018-11-23 12:44:33,196 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1275 transitions. Word has length 46 [2018-11-23 12:44:33,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:33,196 INFO L480 AbstractCegarLoop]: Abstraction has 900 states and 1275 transitions. [2018-11-23 12:44:33,196 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:33,196 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1275 transitions. [2018-11-23 12:44:33,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 12:44:33,198 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:33,198 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:33,198 INFO L423 AbstractCegarLoop]: === Iteration 10 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:33,198 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:33,199 INFO L82 PathProgramCache]: Analyzing trace with hash -564668473, now seen corresponding path program 1 times [2018-11-23 12:44:33,199 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:33,199 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,199 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:33,199 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,199 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:33,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:33,245 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:33,246 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:33,246 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:44:33,246 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:33,246 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:44:33,246 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:44:33,246 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:44:33,247 INFO L87 Difference]: Start difference. First operand 900 states and 1275 transitions. Second operand 4 states. [2018-11-23 12:44:33,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:33,457 INFO L93 Difference]: Finished difference Result 1022 states and 1421 transitions. [2018-11-23 12:44:33,457 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:44:33,457 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 47 [2018-11-23 12:44:33,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:33,460 INFO L225 Difference]: With dead ends: 1022 [2018-11-23 12:44:33,460 INFO L226 Difference]: Without dead ends: 793 [2018-11-23 12:44:33,460 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:44:33,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 793 states. [2018-11-23 12:44:33,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 793 to 759. [2018-11-23 12:44:33,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 759 states. [2018-11-23 12:44:33,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 759 states to 759 states and 1068 transitions. [2018-11-23 12:44:33,486 INFO L78 Accepts]: Start accepts. Automaton has 759 states and 1068 transitions. Word has length 47 [2018-11-23 12:44:33,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:33,486 INFO L480 AbstractCegarLoop]: Abstraction has 759 states and 1068 transitions. [2018-11-23 12:44:33,486 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:44:33,487 INFO L276 IsEmpty]: Start isEmpty. Operand 759 states and 1068 transitions. [2018-11-23 12:44:33,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-11-23 12:44:33,488 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:33,488 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:33,488 INFO L423 AbstractCegarLoop]: === Iteration 11 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:33,489 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:33,489 INFO L82 PathProgramCache]: Analyzing trace with hash -915524998, now seen corresponding path program 1 times [2018-11-23 12:44:33,489 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:33,489 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,489 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:33,489 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,490 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:33,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:33,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:33,527 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:33,527 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:33,527 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:33,527 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:33,528 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:33,528 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:33,528 INFO L87 Difference]: Start difference. First operand 759 states and 1068 transitions. Second operand 3 states. [2018-11-23 12:44:33,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:33,561 INFO L93 Difference]: Finished difference Result 879 states and 1216 transitions. [2018-11-23 12:44:33,561 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:33,561 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2018-11-23 12:44:33,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:33,563 INFO L225 Difference]: With dead ends: 879 [2018-11-23 12:44:33,564 INFO L226 Difference]: Without dead ends: 783 [2018-11-23 12:44:33,564 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:33,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 783 states. [2018-11-23 12:44:33,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 783 to 758. [2018-11-23 12:44:33,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 758 states. [2018-11-23 12:44:33,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 1063 transitions. [2018-11-23 12:44:33,590 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 1063 transitions. Word has length 47 [2018-11-23 12:44:33,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:33,590 INFO L480 AbstractCegarLoop]: Abstraction has 758 states and 1063 transitions. [2018-11-23 12:44:33,590 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:33,590 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 1063 transitions. [2018-11-23 12:44:33,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-11-23 12:44:33,592 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:33,592 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:33,592 INFO L423 AbstractCegarLoop]: === Iteration 12 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:33,592 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:33,592 INFO L82 PathProgramCache]: Analyzing trace with hash 655679991, now seen corresponding path program 1 times [2018-11-23 12:44:33,592 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:33,593 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,593 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:33,593 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,593 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:33,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:33,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:33,622 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:33,622 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:33,622 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:33,623 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:33,623 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:33,623 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:33,623 INFO L87 Difference]: Start difference. First operand 758 states and 1063 transitions. Second operand 3 states. [2018-11-23 12:44:33,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:33,703 INFO L93 Difference]: Finished difference Result 957 states and 1326 transitions. [2018-11-23 12:44:33,703 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:33,703 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 48 [2018-11-23 12:44:33,704 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:33,706 INFO L225 Difference]: With dead ends: 957 [2018-11-23 12:44:33,706 INFO L226 Difference]: Without dead ends: 943 [2018-11-23 12:44:33,707 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:33,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 943 states. [2018-11-23 12:44:33,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 943 to 837. [2018-11-23 12:44:33,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 837 states. [2018-11-23 12:44:33,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 837 states to 837 states and 1155 transitions. [2018-11-23 12:44:33,736 INFO L78 Accepts]: Start accepts. Automaton has 837 states and 1155 transitions. Word has length 48 [2018-11-23 12:44:33,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:33,736 INFO L480 AbstractCegarLoop]: Abstraction has 837 states and 1155 transitions. [2018-11-23 12:44:33,736 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:33,736 INFO L276 IsEmpty]: Start isEmpty. Operand 837 states and 1155 transitions. [2018-11-23 12:44:33,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 12:44:33,738 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:33,738 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:33,738 INFO L423 AbstractCegarLoop]: === Iteration 13 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:33,738 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:33,738 INFO L82 PathProgramCache]: Analyzing trace with hash -704891783, now seen corresponding path program 1 times [2018-11-23 12:44:33,738 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:33,739 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,739 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:33,739 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,740 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:33,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:33,788 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:33,788 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:33,789 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 12:44:33,789 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:33,789 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-23 12:44:33,789 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 12:44:33,789 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-23 12:44:33,789 INFO L87 Difference]: Start difference. First operand 837 states and 1155 transitions. Second operand 8 states. [2018-11-23 12:44:33,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:33,898 INFO L93 Difference]: Finished difference Result 863 states and 1189 transitions. [2018-11-23 12:44:33,898 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 12:44:33,898 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 49 [2018-11-23 12:44:33,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:33,901 INFO L225 Difference]: With dead ends: 863 [2018-11-23 12:44:33,901 INFO L226 Difference]: Without dead ends: 859 [2018-11-23 12:44:33,901 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-23 12:44:33,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 859 states. [2018-11-23 12:44:33,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 859 to 856. [2018-11-23 12:44:33,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 856 states. [2018-11-23 12:44:33,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 856 states to 856 states and 1182 transitions. [2018-11-23 12:44:33,932 INFO L78 Accepts]: Start accepts. Automaton has 856 states and 1182 transitions. Word has length 49 [2018-11-23 12:44:33,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:33,933 INFO L480 AbstractCegarLoop]: Abstraction has 856 states and 1182 transitions. [2018-11-23 12:44:33,933 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-23 12:44:33,933 INFO L276 IsEmpty]: Start isEmpty. Operand 856 states and 1182 transitions. [2018-11-23 12:44:33,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-11-23 12:44:33,935 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:33,935 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:33,935 INFO L423 AbstractCegarLoop]: === Iteration 14 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:33,935 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:33,936 INFO L82 PathProgramCache]: Analyzing trace with hash -705168613, now seen corresponding path program 1 times [2018-11-23 12:44:33,936 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:33,936 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,936 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:33,936 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:33,936 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:33,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:33,990 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:33,990 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:33,990 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-23 12:44:33,990 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:33,991 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-23 12:44:33,991 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-23 12:44:33,991 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-23 12:44:33,991 INFO L87 Difference]: Start difference. First operand 856 states and 1182 transitions. Second operand 8 states. [2018-11-23 12:44:34,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:34,074 INFO L93 Difference]: Finished difference Result 898 states and 1234 transitions. [2018-11-23 12:44:34,074 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 12:44:34,074 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 49 [2018-11-23 12:44:34,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:34,077 INFO L225 Difference]: With dead ends: 898 [2018-11-23 12:44:34,077 INFO L226 Difference]: Without dead ends: 877 [2018-11-23 12:44:34,077 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2018-11-23 12:44:34,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 877 states. [2018-11-23 12:44:34,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 877 to 876. [2018-11-23 12:44:34,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 876 states. [2018-11-23 12:44:34,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 876 states to 876 states and 1206 transitions. [2018-11-23 12:44:34,108 INFO L78 Accepts]: Start accepts. Automaton has 876 states and 1206 transitions. Word has length 49 [2018-11-23 12:44:34,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:34,108 INFO L480 AbstractCegarLoop]: Abstraction has 876 states and 1206 transitions. [2018-11-23 12:44:34,108 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-23 12:44:34,108 INFO L276 IsEmpty]: Start isEmpty. Operand 876 states and 1206 transitions. [2018-11-23 12:44:34,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 12:44:34,110 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:34,110 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:34,110 INFO L423 AbstractCegarLoop]: === Iteration 15 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:34,110 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:34,110 INFO L82 PathProgramCache]: Analyzing trace with hash -421895854, now seen corresponding path program 1 times [2018-11-23 12:44:34,111 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:34,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:34,111 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:34,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:34,111 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:34,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:34,141 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:34,142 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:34,142 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:44:34,142 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:34,142 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:44:34,142 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:44:34,142 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:44:34,143 INFO L87 Difference]: Start difference. First operand 876 states and 1206 transitions. Second operand 4 states. [2018-11-23 12:44:34,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:34,181 INFO L93 Difference]: Finished difference Result 901 states and 1231 transitions. [2018-11-23 12:44:34,182 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:44:34,182 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 50 [2018-11-23 12:44:34,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:34,184 INFO L225 Difference]: With dead ends: 901 [2018-11-23 12:44:34,184 INFO L226 Difference]: Without dead ends: 879 [2018-11-23 12:44:34,185 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:34,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 879 states. [2018-11-23 12:44:34,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 879 to 876. [2018-11-23 12:44:34,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 876 states. [2018-11-23 12:44:34,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 876 states to 876 states and 1205 transitions. [2018-11-23 12:44:34,218 INFO L78 Accepts]: Start accepts. Automaton has 876 states and 1205 transitions. Word has length 50 [2018-11-23 12:44:34,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:34,218 INFO L480 AbstractCegarLoop]: Abstraction has 876 states and 1205 transitions. [2018-11-23 12:44:34,218 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:44:34,218 INFO L276 IsEmpty]: Start isEmpty. Operand 876 states and 1205 transitions. [2018-11-23 12:44:34,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 12:44:34,220 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:34,220 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:34,220 INFO L423 AbstractCegarLoop]: === Iteration 16 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:34,220 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:34,220 INFO L82 PathProgramCache]: Analyzing trace with hash 1878926736, now seen corresponding path program 1 times [2018-11-23 12:44:34,220 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:34,221 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:34,221 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:34,221 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:34,221 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:34,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:34,278 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:34,278 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:34,278 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 12:44:34,278 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:34,279 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 12:44:34,279 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 12:44:34,279 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:44:34,279 INFO L87 Difference]: Start difference. First operand 876 states and 1205 transitions. Second operand 7 states. [2018-11-23 12:44:34,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:34,943 INFO L93 Difference]: Finished difference Result 1088 states and 1539 transitions. [2018-11-23 12:44:34,944 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 12:44:34,944 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 50 [2018-11-23 12:44:34,944 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:34,947 INFO L225 Difference]: With dead ends: 1088 [2018-11-23 12:44:34,947 INFO L226 Difference]: Without dead ends: 997 [2018-11-23 12:44:34,948 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2018-11-23 12:44:34,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 997 states. [2018-11-23 12:44:34,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 997 to 856. [2018-11-23 12:44:34,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 856 states. [2018-11-23 12:44:34,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 856 states to 856 states and 1169 transitions. [2018-11-23 12:44:34,978 INFO L78 Accepts]: Start accepts. Automaton has 856 states and 1169 transitions. Word has length 50 [2018-11-23 12:44:34,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:34,979 INFO L480 AbstractCegarLoop]: Abstraction has 856 states and 1169 transitions. [2018-11-23 12:44:34,979 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 12:44:34,979 INFO L276 IsEmpty]: Start isEmpty. Operand 856 states and 1169 transitions. [2018-11-23 12:44:34,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 12:44:34,981 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:34,981 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:34,981 INFO L423 AbstractCegarLoop]: === Iteration 17 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:34,981 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:34,981 INFO L82 PathProgramCache]: Analyzing trace with hash 2025619538, now seen corresponding path program 1 times [2018-11-23 12:44:34,981 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:34,982 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:34,982 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:34,982 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:34,982 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:34,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:35,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:35,014 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:35,014 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:35,014 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:35,014 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:35,014 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:35,014 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:35,015 INFO L87 Difference]: Start difference. First operand 856 states and 1169 transitions. Second operand 3 states. [2018-11-23 12:44:35,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:35,095 INFO L93 Difference]: Finished difference Result 1038 states and 1408 transitions. [2018-11-23 12:44:35,096 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:35,096 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 50 [2018-11-23 12:44:35,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:35,098 INFO L225 Difference]: With dead ends: 1038 [2018-11-23 12:44:35,098 INFO L226 Difference]: Without dead ends: 998 [2018-11-23 12:44:35,099 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:35,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 998 states. [2018-11-23 12:44:35,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 998 to 890. [2018-11-23 12:44:35,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 890 states. [2018-11-23 12:44:35,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 890 states to 890 states and 1201 transitions. [2018-11-23 12:44:35,131 INFO L78 Accepts]: Start accepts. Automaton has 890 states and 1201 transitions. Word has length 50 [2018-11-23 12:44:35,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:35,131 INFO L480 AbstractCegarLoop]: Abstraction has 890 states and 1201 transitions. [2018-11-23 12:44:35,131 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:35,131 INFO L276 IsEmpty]: Start isEmpty. Operand 890 states and 1201 transitions. [2018-11-23 12:44:35,133 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2018-11-23 12:44:35,133 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:35,133 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:35,133 INFO L423 AbstractCegarLoop]: === Iteration 18 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:35,133 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:35,133 INFO L82 PathProgramCache]: Analyzing trace with hash 274322421, now seen corresponding path program 1 times [2018-11-23 12:44:35,133 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:35,134 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:35,134 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:35,134 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:35,134 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:35,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:35,210 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:35,211 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:35,211 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-23 12:44:35,211 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:35,211 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-23 12:44:35,211 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-23 12:44:35,211 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2018-11-23 12:44:35,211 INFO L87 Difference]: Start difference. First operand 890 states and 1201 transitions. Second operand 9 states. [2018-11-23 12:44:36,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:36,276 INFO L93 Difference]: Finished difference Result 1211 states and 1672 transitions. [2018-11-23 12:44:36,277 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-11-23 12:44:36,277 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 50 [2018-11-23 12:44:36,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:36,281 INFO L225 Difference]: With dead ends: 1211 [2018-11-23 12:44:36,281 INFO L226 Difference]: Without dead ends: 1142 [2018-11-23 12:44:36,282 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 3 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=262, Unknown=0, NotChecked=0, Total=342 [2018-11-23 12:44:36,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1142 states. [2018-11-23 12:44:36,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1142 to 902. [2018-11-23 12:44:36,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 902 states. [2018-11-23 12:44:36,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 902 states to 902 states and 1225 transitions. [2018-11-23 12:44:36,337 INFO L78 Accepts]: Start accepts. Automaton has 902 states and 1225 transitions. Word has length 50 [2018-11-23 12:44:36,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:36,337 INFO L480 AbstractCegarLoop]: Abstraction has 902 states and 1225 transitions. [2018-11-23 12:44:36,337 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-23 12:44:36,338 INFO L276 IsEmpty]: Start isEmpty. Operand 902 states and 1225 transitions. [2018-11-23 12:44:36,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 12:44:36,339 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:36,340 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:36,340 INFO L423 AbstractCegarLoop]: === Iteration 19 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:36,340 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:36,340 INFO L82 PathProgramCache]: Analyzing trace with hash -1098118333, now seen corresponding path program 1 times [2018-11-23 12:44:36,340 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:36,342 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:36,342 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:36,343 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:36,343 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:36,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:36,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:36,381 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:36,381 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:36,381 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:36,381 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:36,382 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:36,382 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:36,382 INFO L87 Difference]: Start difference. First operand 902 states and 1225 transitions. Second operand 3 states. [2018-11-23 12:44:36,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:36,511 INFO L93 Difference]: Finished difference Result 930 states and 1257 transitions. [2018-11-23 12:44:36,511 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:36,511 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 52 [2018-11-23 12:44:36,511 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:36,514 INFO L225 Difference]: With dead ends: 930 [2018-11-23 12:44:36,514 INFO L226 Difference]: Without dead ends: 925 [2018-11-23 12:44:36,515 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:36,516 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 925 states. [2018-11-23 12:44:36,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 925 to 919. [2018-11-23 12:44:36,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 919 states. [2018-11-23 12:44:36,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1246 transitions. [2018-11-23 12:44:36,572 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1246 transitions. Word has length 52 [2018-11-23 12:44:36,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:36,572 INFO L480 AbstractCegarLoop]: Abstraction has 919 states and 1246 transitions. [2018-11-23 12:44:36,573 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:36,573 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1246 transitions. [2018-11-23 12:44:36,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 12:44:36,574 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:36,575 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:36,575 INFO L423 AbstractCegarLoop]: === Iteration 20 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:36,575 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:36,575 INFO L82 PathProgramCache]: Analyzing trace with hash 1807495809, now seen corresponding path program 1 times [2018-11-23 12:44:36,575 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:36,576 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:36,576 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:36,576 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:36,576 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:36,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:36,614 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:36,614 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:36,615 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:36,615 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:36,615 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:36,615 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:36,615 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:36,615 INFO L87 Difference]: Start difference. First operand 919 states and 1246 transitions. Second operand 3 states. [2018-11-23 12:44:36,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:36,721 INFO L93 Difference]: Finished difference Result 1135 states and 1537 transitions. [2018-11-23 12:44:36,722 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:36,722 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 54 [2018-11-23 12:44:36,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:36,725 INFO L225 Difference]: With dead ends: 1135 [2018-11-23 12:44:36,725 INFO L226 Difference]: Without dead ends: 888 [2018-11-23 12:44:36,726 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:36,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 888 states. [2018-11-23 12:44:36,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 888 to 888. [2018-11-23 12:44:36,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 888 states. [2018-11-23 12:44:36,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 888 states to 888 states and 1206 transitions. [2018-11-23 12:44:36,778 INFO L78 Accepts]: Start accepts. Automaton has 888 states and 1206 transitions. Word has length 54 [2018-11-23 12:44:36,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:36,778 INFO L480 AbstractCegarLoop]: Abstraction has 888 states and 1206 transitions. [2018-11-23 12:44:36,778 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:36,778 INFO L276 IsEmpty]: Start isEmpty. Operand 888 states and 1206 transitions. [2018-11-23 12:44:36,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-11-23 12:44:36,780 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:36,780 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:36,780 INFO L423 AbstractCegarLoop]: === Iteration 21 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:36,780 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:36,781 INFO L82 PathProgramCache]: Analyzing trace with hash 761658191, now seen corresponding path program 1 times [2018-11-23 12:44:36,781 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:36,781 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:36,781 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:36,781 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:36,781 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:36,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:36,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:36,839 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:36,839 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:36,839 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:36,839 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:36,839 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:36,839 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:36,840 INFO L87 Difference]: Start difference. First operand 888 states and 1206 transitions. Second operand 5 states. [2018-11-23 12:44:37,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:37,347 INFO L93 Difference]: Finished difference Result 900 states and 1216 transitions. [2018-11-23 12:44:37,348 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:37,348 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2018-11-23 12:44:37,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:37,351 INFO L225 Difference]: With dead ends: 900 [2018-11-23 12:44:37,351 INFO L226 Difference]: Without dead ends: 894 [2018-11-23 12:44:37,352 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:44:37,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 894 states. [2018-11-23 12:44:37,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 894 to 888. [2018-11-23 12:44:37,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 888 states. [2018-11-23 12:44:37,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 888 states to 888 states and 1205 transitions. [2018-11-23 12:44:37,409 INFO L78 Accepts]: Start accepts. Automaton has 888 states and 1205 transitions. Word has length 53 [2018-11-23 12:44:37,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:37,410 INFO L480 AbstractCegarLoop]: Abstraction has 888 states and 1205 transitions. [2018-11-23 12:44:37,410 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:37,410 INFO L276 IsEmpty]: Start isEmpty. Operand 888 states and 1205 transitions. [2018-11-23 12:44:37,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-11-23 12:44:37,412 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:37,412 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:37,412 INFO L423 AbstractCegarLoop]: === Iteration 22 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:37,412 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:37,412 INFO L82 PathProgramCache]: Analyzing trace with hash -493669766, now seen corresponding path program 1 times [2018-11-23 12:44:37,412 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:37,413 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:37,413 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:37,413 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:37,413 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:37,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:37,460 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:37,460 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:37,460 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:37,461 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:37,461 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:37,461 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:37,461 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:37,461 INFO L87 Difference]: Start difference. First operand 888 states and 1205 transitions. Second operand 5 states. [2018-11-23 12:44:38,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:38,254 INFO L93 Difference]: Finished difference Result 903 states and 1220 transitions. [2018-11-23 12:44:38,257 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:38,257 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2018-11-23 12:44:38,257 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:38,260 INFO L225 Difference]: With dead ends: 903 [2018-11-23 12:44:38,261 INFO L226 Difference]: Without dead ends: 867 [2018-11-23 12:44:38,261 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:44:38,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 867 states. [2018-11-23 12:44:38,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 867 to 861. [2018-11-23 12:44:38,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 861 states. [2018-11-23 12:44:38,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1175 transitions. [2018-11-23 12:44:38,320 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1175 transitions. Word has length 52 [2018-11-23 12:44:38,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:38,320 INFO L480 AbstractCegarLoop]: Abstraction has 861 states and 1175 transitions. [2018-11-23 12:44:38,320 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:38,320 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1175 transitions. [2018-11-23 12:44:38,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 12:44:38,322 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:38,322 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:38,323 INFO L423 AbstractCegarLoop]: === Iteration 23 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:38,323 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:38,323 INFO L82 PathProgramCache]: Analyzing trace with hash 1504546088, now seen corresponding path program 1 times [2018-11-23 12:44:38,323 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:38,324 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:38,324 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:38,324 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:38,324 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:38,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:38,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:38,375 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:38,375 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:38,375 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:38,376 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:38,376 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:38,376 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:38,376 INFO L87 Difference]: Start difference. First operand 861 states and 1175 transitions. Second operand 5 states. [2018-11-23 12:44:38,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:38,851 INFO L93 Difference]: Finished difference Result 871 states and 1183 transitions. [2018-11-23 12:44:38,852 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:38,852 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2018-11-23 12:44:38,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:38,855 INFO L225 Difference]: With dead ends: 871 [2018-11-23 12:44:38,855 INFO L226 Difference]: Without dead ends: 865 [2018-11-23 12:44:38,856 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:44:38,858 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 865 states. [2018-11-23 12:44:38,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 865 to 861. [2018-11-23 12:44:38,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 861 states. [2018-11-23 12:44:38,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1174 transitions. [2018-11-23 12:44:38,913 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1174 transitions. Word has length 54 [2018-11-23 12:44:38,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:38,913 INFO L480 AbstractCegarLoop]: Abstraction has 861 states and 1174 transitions. [2018-11-23 12:44:38,913 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:38,914 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1174 transitions. [2018-11-23 12:44:38,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:44:38,916 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:38,916 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:38,916 INFO L423 AbstractCegarLoop]: === Iteration 24 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:38,916 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:38,916 INFO L82 PathProgramCache]: Analyzing trace with hash -291565544, now seen corresponding path program 1 times [2018-11-23 12:44:38,916 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:38,917 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:38,917 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:38,917 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:38,917 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:38,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:38,992 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:38,992 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:38,992 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-23 12:44:38,993 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:38,993 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-23 12:44:38,993 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-23 12:44:38,993 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2018-11-23 12:44:38,993 INFO L87 Difference]: Start difference. First operand 861 states and 1174 transitions. Second operand 9 states. [2018-11-23 12:44:39,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:39,208 INFO L93 Difference]: Finished difference Result 888 states and 1204 transitions. [2018-11-23 12:44:39,208 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 12:44:39,208 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 55 [2018-11-23 12:44:39,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:39,210 INFO L225 Difference]: With dead ends: 888 [2018-11-23 12:44:39,211 INFO L226 Difference]: Without dead ends: 852 [2018-11-23 12:44:39,211 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:39,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 852 states. [2018-11-23 12:44:39,242 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 852 to 852. [2018-11-23 12:44:39,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 852 states. [2018-11-23 12:44:39,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 852 states to 852 states and 1150 transitions. [2018-11-23 12:44:39,244 INFO L78 Accepts]: Start accepts. Automaton has 852 states and 1150 transitions. Word has length 55 [2018-11-23 12:44:39,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:39,244 INFO L480 AbstractCegarLoop]: Abstraction has 852 states and 1150 transitions. [2018-11-23 12:44:39,244 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-23 12:44:39,244 INFO L276 IsEmpty]: Start isEmpty. Operand 852 states and 1150 transitions. [2018-11-23 12:44:39,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 12:44:39,246 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:39,246 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:39,247 INFO L423 AbstractCegarLoop]: === Iteration 25 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:39,247 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:39,247 INFO L82 PathProgramCache]: Analyzing trace with hash 1728183236, now seen corresponding path program 1 times [2018-11-23 12:44:39,247 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:39,247 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,248 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:39,248 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,248 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:39,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:39,338 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:39,338 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:39,338 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 12:44:39,339 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:39,339 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 12:44:39,339 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 12:44:39,339 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-23 12:44:39,339 INFO L87 Difference]: Start difference. First operand 852 states and 1150 transitions. Second operand 10 states. [2018-11-23 12:44:39,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:39,496 INFO L93 Difference]: Finished difference Result 868 states and 1167 transitions. [2018-11-23 12:44:39,496 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-23 12:44:39,496 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 56 [2018-11-23 12:44:39,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:39,499 INFO L225 Difference]: With dead ends: 868 [2018-11-23 12:44:39,499 INFO L226 Difference]: Without dead ends: 850 [2018-11-23 12:44:39,499 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:39,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 850 states. [2018-11-23 12:44:39,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 850 to 850. [2018-11-23 12:44:39,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 850 states. [2018-11-23 12:44:39,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 850 states to 850 states and 1146 transitions. [2018-11-23 12:44:39,532 INFO L78 Accepts]: Start accepts. Automaton has 850 states and 1146 transitions. Word has length 56 [2018-11-23 12:44:39,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:39,532 INFO L480 AbstractCegarLoop]: Abstraction has 850 states and 1146 transitions. [2018-11-23 12:44:39,532 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 12:44:39,532 INFO L276 IsEmpty]: Start isEmpty. Operand 850 states and 1146 transitions. [2018-11-23 12:44:39,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:44:39,534 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:39,534 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:39,534 INFO L423 AbstractCegarLoop]: === Iteration 26 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:39,534 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:39,534 INFO L82 PathProgramCache]: Analyzing trace with hash -1135140490, now seen corresponding path program 1 times [2018-11-23 12:44:39,534 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:39,535 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,535 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:39,535 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,535 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:39,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:39,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:39,616 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:39,616 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 12:44:39,616 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:39,616 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 12:44:39,616 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 12:44:39,616 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-23 12:44:39,617 INFO L87 Difference]: Start difference. First operand 850 states and 1146 transitions. Second operand 10 states. [2018-11-23 12:44:39,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:39,758 INFO L93 Difference]: Finished difference Result 863 states and 1160 transitions. [2018-11-23 12:44:39,759 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-23 12:44:39,759 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 55 [2018-11-23 12:44:39,759 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:39,761 INFO L225 Difference]: With dead ends: 863 [2018-11-23 12:44:39,761 INFO L226 Difference]: Without dead ends: 845 [2018-11-23 12:44:39,761 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:39,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 845 states. [2018-11-23 12:44:39,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 845 to 845. [2018-11-23 12:44:39,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 845 states. [2018-11-23 12:44:39,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 845 states to 845 states and 1139 transitions. [2018-11-23 12:44:39,794 INFO L78 Accepts]: Start accepts. Automaton has 845 states and 1139 transitions. Word has length 55 [2018-11-23 12:44:39,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:39,794 INFO L480 AbstractCegarLoop]: Abstraction has 845 states and 1139 transitions. [2018-11-23 12:44:39,794 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 12:44:39,794 INFO L276 IsEmpty]: Start isEmpty. Operand 845 states and 1139 transitions. [2018-11-23 12:44:39,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 12:44:39,796 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:39,796 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:39,796 INFO L423 AbstractCegarLoop]: === Iteration 27 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:39,796 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:39,796 INFO L82 PathProgramCache]: Analyzing trace with hash 49569733, now seen corresponding path program 1 times [2018-11-23 12:44:39,796 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:39,797 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,797 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:39,797 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,797 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:39,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:39,831 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:39,831 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:39,831 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:39,831 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:39,832 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:39,832 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:39,832 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:39,832 INFO L87 Difference]: Start difference. First operand 845 states and 1139 transitions. Second operand 3 states. [2018-11-23 12:44:39,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:39,870 INFO L93 Difference]: Finished difference Result 1098 states and 1473 transitions. [2018-11-23 12:44:39,871 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:39,871 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 74 [2018-11-23 12:44:39,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:39,873 INFO L225 Difference]: With dead ends: 1098 [2018-11-23 12:44:39,873 INFO L226 Difference]: Without dead ends: 935 [2018-11-23 12:44:39,874 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:39,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 935 states. [2018-11-23 12:44:39,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 935 to 904. [2018-11-23 12:44:39,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 904 states. [2018-11-23 12:44:39,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 904 states to 904 states and 1215 transitions. [2018-11-23 12:44:39,908 INFO L78 Accepts]: Start accepts. Automaton has 904 states and 1215 transitions. Word has length 74 [2018-11-23 12:44:39,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:39,908 INFO L480 AbstractCegarLoop]: Abstraction has 904 states and 1215 transitions. [2018-11-23 12:44:39,908 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:39,908 INFO L276 IsEmpty]: Start isEmpty. Operand 904 states and 1215 transitions. [2018-11-23 12:44:39,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 12:44:39,910 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:39,910 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:39,910 INFO L423 AbstractCegarLoop]: === Iteration 28 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:39,910 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:39,910 INFO L82 PathProgramCache]: Analyzing trace with hash 2094530933, now seen corresponding path program 1 times [2018-11-23 12:44:39,910 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:39,911 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,911 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:39,911 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:39,911 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:39,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:40,019 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:40,019 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:40,019 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 12:44:40,020 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:40,020 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 12:44:40,020 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 12:44:40,020 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 12:44:40,020 INFO L87 Difference]: Start difference. First operand 904 states and 1215 transitions. Second operand 12 states. [2018-11-23 12:44:40,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:40,199 INFO L93 Difference]: Finished difference Result 930 states and 1243 transitions. [2018-11-23 12:44:40,199 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 12:44:40,199 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 59 [2018-11-23 12:44:40,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:40,201 INFO L225 Difference]: With dead ends: 930 [2018-11-23 12:44:40,201 INFO L226 Difference]: Without dead ends: 905 [2018-11-23 12:44:40,202 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 12:44:40,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 905 states. [2018-11-23 12:44:40,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 905 to 903. [2018-11-23 12:44:40,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 903 states. [2018-11-23 12:44:40,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 903 states to 903 states and 1204 transitions. [2018-11-23 12:44:40,238 INFO L78 Accepts]: Start accepts. Automaton has 903 states and 1204 transitions. Word has length 59 [2018-11-23 12:44:40,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:40,238 INFO L480 AbstractCegarLoop]: Abstraction has 903 states and 1204 transitions. [2018-11-23 12:44:40,238 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 12:44:40,238 INFO L276 IsEmpty]: Start isEmpty. Operand 903 states and 1204 transitions. [2018-11-23 12:44:40,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 12:44:40,254 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:40,254 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:40,254 INFO L423 AbstractCegarLoop]: === Iteration 29 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:40,254 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:40,254 INFO L82 PathProgramCache]: Analyzing trace with hash 1190823714, now seen corresponding path program 1 times [2018-11-23 12:44:40,255 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:40,255 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:40,255 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:40,255 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:40,255 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:40,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:40,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:40,390 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:40,390 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 12:44:40,390 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:40,390 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 12:44:40,390 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 12:44:40,391 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:40,391 INFO L87 Difference]: Start difference. First operand 903 states and 1204 transitions. Second operand 11 states. [2018-11-23 12:44:40,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:40,573 INFO L93 Difference]: Finished difference Result 920 states and 1222 transitions. [2018-11-23 12:44:40,574 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 12:44:40,574 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 58 [2018-11-23 12:44:40,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:40,577 INFO L225 Difference]: With dead ends: 920 [2018-11-23 12:44:40,577 INFO L226 Difference]: Without dead ends: 900 [2018-11-23 12:44:40,578 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:40,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 900 states. [2018-11-23 12:44:40,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 900 to 900. [2018-11-23 12:44:40,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 900 states. [2018-11-23 12:44:40,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1199 transitions. [2018-11-23 12:44:40,635 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1199 transitions. Word has length 58 [2018-11-23 12:44:40,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:40,635 INFO L480 AbstractCegarLoop]: Abstraction has 900 states and 1199 transitions. [2018-11-23 12:44:40,636 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 12:44:40,636 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1199 transitions. [2018-11-23 12:44:40,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 12:44:40,638 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:40,638 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:40,638 INFO L423 AbstractCegarLoop]: === Iteration 30 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:40,638 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:40,638 INFO L82 PathProgramCache]: Analyzing trace with hash -109492812, now seen corresponding path program 1 times [2018-11-23 12:44:40,638 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:40,639 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:40,639 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:40,639 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:40,639 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:40,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:40,728 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:40,728 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:40,728 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 12:44:40,728 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:40,729 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 12:44:40,729 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 12:44:40,729 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2018-11-23 12:44:40,729 INFO L87 Difference]: Start difference. First operand 900 states and 1199 transitions. Second operand 10 states. [2018-11-23 12:44:40,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:40,961 INFO L93 Difference]: Finished difference Result 967 states and 1274 transitions. [2018-11-23 12:44:40,961 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 12:44:40,961 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 59 [2018-11-23 12:44:40,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:40,964 INFO L225 Difference]: With dead ends: 967 [2018-11-23 12:44:40,964 INFO L226 Difference]: Without dead ends: 858 [2018-11-23 12:44:40,965 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:40,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 858 states. [2018-11-23 12:44:41,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 858 to 855. [2018-11-23 12:44:41,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 855 states. [2018-11-23 12:44:41,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 855 states to 855 states and 1118 transitions. [2018-11-23 12:44:41,019 INFO L78 Accepts]: Start accepts. Automaton has 855 states and 1118 transitions. Word has length 59 [2018-11-23 12:44:41,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:41,019 INFO L480 AbstractCegarLoop]: Abstraction has 855 states and 1118 transitions. [2018-11-23 12:44:41,019 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 12:44:41,019 INFO L276 IsEmpty]: Start isEmpty. Operand 855 states and 1118 transitions. [2018-11-23 12:44:41,021 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-23 12:44:41,021 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:41,021 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:41,021 INFO L423 AbstractCegarLoop]: === Iteration 31 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:41,022 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:41,022 INFO L82 PathProgramCache]: Analyzing trace with hash 2110252174, now seen corresponding path program 1 times [2018-11-23 12:44:41,022 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:41,022 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:41,022 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:41,022 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:41,022 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:41,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:41,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:41,060 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:41,060 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:44:41,060 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:41,060 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:44:41,060 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:44:41,060 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:44:41,061 INFO L87 Difference]: Start difference. First operand 855 states and 1118 transitions. Second operand 4 states. [2018-11-23 12:44:41,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:41,371 INFO L93 Difference]: Finished difference Result 1012 states and 1336 transitions. [2018-11-23 12:44:41,372 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:44:41,372 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 60 [2018-11-23 12:44:41,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:41,375 INFO L225 Difference]: With dead ends: 1012 [2018-11-23 12:44:41,375 INFO L226 Difference]: Without dead ends: 904 [2018-11-23 12:44:41,375 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:41,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 904 states. [2018-11-23 12:44:41,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 904 to 862. [2018-11-23 12:44:41,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 862 states. [2018-11-23 12:44:41,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 862 states and 1133 transitions. [2018-11-23 12:44:41,429 INFO L78 Accepts]: Start accepts. Automaton has 862 states and 1133 transitions. Word has length 60 [2018-11-23 12:44:41,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:41,429 INFO L480 AbstractCegarLoop]: Abstraction has 862 states and 1133 transitions. [2018-11-23 12:44:41,429 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:44:41,429 INFO L276 IsEmpty]: Start isEmpty. Operand 862 states and 1133 transitions. [2018-11-23 12:44:41,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2018-11-23 12:44:41,431 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:41,431 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:41,431 INFO L423 AbstractCegarLoop]: === Iteration 32 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:41,431 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:41,432 INFO L82 PathProgramCache]: Analyzing trace with hash -1909955508, now seen corresponding path program 1 times [2018-11-23 12:44:41,432 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:41,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:41,432 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:41,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:41,432 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:41,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:41,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:41,527 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:41,527 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 12:44:41,527 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:41,527 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 12:44:41,528 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 12:44:41,528 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:41,528 INFO L87 Difference]: Start difference. First operand 862 states and 1133 transitions. Second operand 11 states. [2018-11-23 12:44:41,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:41,737 INFO L93 Difference]: Finished difference Result 931 states and 1224 transitions. [2018-11-23 12:44:41,738 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 12:44:41,738 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 60 [2018-11-23 12:44:41,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:41,740 INFO L225 Difference]: With dead ends: 931 [2018-11-23 12:44:41,741 INFO L226 Difference]: Without dead ends: 876 [2018-11-23 12:44:41,741 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:41,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 876 states. [2018-11-23 12:44:41,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 876 to 866. [2018-11-23 12:44:41,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 866 states. [2018-11-23 12:44:41,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 866 states to 866 states and 1150 transitions. [2018-11-23 12:44:41,795 INFO L78 Accepts]: Start accepts. Automaton has 866 states and 1150 transitions. Word has length 60 [2018-11-23 12:44:41,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:41,795 INFO L480 AbstractCegarLoop]: Abstraction has 866 states and 1150 transitions. [2018-11-23 12:44:41,795 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 12:44:41,795 INFO L276 IsEmpty]: Start isEmpty. Operand 866 states and 1150 transitions. [2018-11-23 12:44:41,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 12:44:41,797 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:41,797 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:41,798 INFO L423 AbstractCegarLoop]: === Iteration 33 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:41,798 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:41,798 INFO L82 PathProgramCache]: Analyzing trace with hash -340760307, now seen corresponding path program 1 times [2018-11-23 12:44:41,798 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:41,798 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:41,799 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:41,799 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:41,799 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:41,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:41,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:41,870 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:41,870 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:41,870 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:41,870 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:41,870 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:41,870 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:41,871 INFO L87 Difference]: Start difference. First operand 866 states and 1150 transitions. Second operand 5 states. [2018-11-23 12:44:42,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:42,066 INFO L93 Difference]: Finished difference Result 901 states and 1192 transitions. [2018-11-23 12:44:42,067 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:42,067 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 67 [2018-11-23 12:44:42,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:42,070 INFO L225 Difference]: With dead ends: 901 [2018-11-23 12:44:42,070 INFO L226 Difference]: Without dead ends: 873 [2018-11-23 12:44:42,071 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:44:42,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 873 states. [2018-11-23 12:44:42,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 873 to 871. [2018-11-23 12:44:42,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 871 states. [2018-11-23 12:44:42,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 871 states to 871 states and 1159 transitions. [2018-11-23 12:44:42,134 INFO L78 Accepts]: Start accepts. Automaton has 871 states and 1159 transitions. Word has length 67 [2018-11-23 12:44:42,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:42,135 INFO L480 AbstractCegarLoop]: Abstraction has 871 states and 1159 transitions. [2018-11-23 12:44:42,135 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:42,135 INFO L276 IsEmpty]: Start isEmpty. Operand 871 states and 1159 transitions. [2018-11-23 12:44:42,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 12:44:42,137 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:42,137 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:42,137 INFO L423 AbstractCegarLoop]: === Iteration 34 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:42,137 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:42,137 INFO L82 PathProgramCache]: Analyzing trace with hash 1988119945, now seen corresponding path program 1 times [2018-11-23 12:44:42,137 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:42,138 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:42,138 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:42,138 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:42,138 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:42,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:42,310 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:42,310 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:42,310 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 12:44:42,310 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:42,310 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 12:44:42,311 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 12:44:42,311 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 12:44:42,311 INFO L87 Difference]: Start difference. First operand 871 states and 1159 transitions. Second operand 12 states. [2018-11-23 12:44:42,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:42,463 INFO L93 Difference]: Finished difference Result 893 states and 1182 transitions. [2018-11-23 12:44:42,463 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 12:44:42,463 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 63 [2018-11-23 12:44:42,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:42,465 INFO L225 Difference]: With dead ends: 893 [2018-11-23 12:44:42,465 INFO L226 Difference]: Without dead ends: 869 [2018-11-23 12:44:42,465 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 12:44:42,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 869 states. [2018-11-23 12:44:42,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 869 to 869. [2018-11-23 12:44:42,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 869 states. [2018-11-23 12:44:42,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 869 states to 869 states and 1154 transitions. [2018-11-23 12:44:42,522 INFO L78 Accepts]: Start accepts. Automaton has 869 states and 1154 transitions. Word has length 63 [2018-11-23 12:44:42,523 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:42,523 INFO L480 AbstractCegarLoop]: Abstraction has 869 states and 1154 transitions. [2018-11-23 12:44:42,523 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 12:44:42,523 INFO L276 IsEmpty]: Start isEmpty. Operand 869 states and 1154 transitions. [2018-11-23 12:44:42,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 12:44:42,525 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:42,525 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:42,525 INFO L423 AbstractCegarLoop]: === Iteration 35 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:42,525 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:42,526 INFO L82 PathProgramCache]: Analyzing trace with hash 360839567, now seen corresponding path program 1 times [2018-11-23 12:44:42,526 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:42,526 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:42,526 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:42,527 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:42,527 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:42,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:42,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:42,617 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:42,618 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 12:44:42,618 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:42,618 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 12:44:42,618 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 12:44:42,618 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 12:44:42,619 INFO L87 Difference]: Start difference. First operand 869 states and 1154 transitions. Second operand 12 states. [2018-11-23 12:44:42,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:42,798 INFO L93 Difference]: Finished difference Result 893 states and 1179 transitions. [2018-11-23 12:44:42,798 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 12:44:42,798 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 67 [2018-11-23 12:44:42,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:42,827 INFO L225 Difference]: With dead ends: 893 [2018-11-23 12:44:42,827 INFO L226 Difference]: Without dead ends: 869 [2018-11-23 12:44:42,828 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 12:44:42,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 869 states. [2018-11-23 12:44:42,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 869 to 867. [2018-11-23 12:44:42,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 867 states. [2018-11-23 12:44:42,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 867 states to 867 states and 1150 transitions. [2018-11-23 12:44:42,859 INFO L78 Accepts]: Start accepts. Automaton has 867 states and 1150 transitions. Word has length 67 [2018-11-23 12:44:42,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:42,860 INFO L480 AbstractCegarLoop]: Abstraction has 867 states and 1150 transitions. [2018-11-23 12:44:42,860 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 12:44:42,860 INFO L276 IsEmpty]: Start isEmpty. Operand 867 states and 1150 transitions. [2018-11-23 12:44:42,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2018-11-23 12:44:42,862 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:42,862 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:42,862 INFO L423 AbstractCegarLoop]: === Iteration 36 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:42,862 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:42,862 INFO L82 PathProgramCache]: Analyzing trace with hash -1861861007, now seen corresponding path program 1 times [2018-11-23 12:44:42,862 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:42,863 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:42,863 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:42,863 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:42,863 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:42,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:42,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:42,946 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:42,946 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 12:44:42,946 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:42,946 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 12:44:42,946 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 12:44:42,947 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 12:44:42,947 INFO L87 Difference]: Start difference. First operand 867 states and 1150 transitions. Second operand 12 states. [2018-11-23 12:44:43,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:43,082 INFO L93 Difference]: Finished difference Result 891 states and 1175 transitions. [2018-11-23 12:44:43,082 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 12:44:43,082 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 62 [2018-11-23 12:44:43,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:43,084 INFO L225 Difference]: With dead ends: 891 [2018-11-23 12:44:43,084 INFO L226 Difference]: Without dead ends: 867 [2018-11-23 12:44:43,085 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 12:44:43,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 867 states. [2018-11-23 12:44:43,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 867 to 865. [2018-11-23 12:44:43,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 865 states. [2018-11-23 12:44:43,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 865 states to 865 states and 1146 transitions. [2018-11-23 12:44:43,117 INFO L78 Accepts]: Start accepts. Automaton has 865 states and 1146 transitions. Word has length 62 [2018-11-23 12:44:43,117 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:43,117 INFO L480 AbstractCegarLoop]: Abstraction has 865 states and 1146 transitions. [2018-11-23 12:44:43,117 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 12:44:43,118 INFO L276 IsEmpty]: Start isEmpty. Operand 865 states and 1146 transitions. [2018-11-23 12:44:43,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2018-11-23 12:44:43,120 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:43,120 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:43,120 INFO L423 AbstractCegarLoop]: === Iteration 37 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:43,120 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:43,120 INFO L82 PathProgramCache]: Analyzing trace with hash 2111220271, now seen corresponding path program 1 times [2018-11-23 12:44:43,120 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:43,121 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,121 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:43,121 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,121 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:43,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:43,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:43,142 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:43,142 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:43,143 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:43,143 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:43,143 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:43,143 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:43,143 INFO L87 Difference]: Start difference. First operand 865 states and 1146 transitions. Second operand 3 states. [2018-11-23 12:44:43,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:43,170 INFO L93 Difference]: Finished difference Result 1137 states and 1501 transitions. [2018-11-23 12:44:43,171 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:43,171 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 62 [2018-11-23 12:44:43,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:43,173 INFO L225 Difference]: With dead ends: 1137 [2018-11-23 12:44:43,173 INFO L226 Difference]: Without dead ends: 793 [2018-11-23 12:44:43,174 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:43,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 793 states. [2018-11-23 12:44:43,201 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 793 to 762. [2018-11-23 12:44:43,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 762 states. [2018-11-23 12:44:43,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 762 states to 762 states and 977 transitions. [2018-11-23 12:44:43,202 INFO L78 Accepts]: Start accepts. Automaton has 762 states and 977 transitions. Word has length 62 [2018-11-23 12:44:43,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:43,203 INFO L480 AbstractCegarLoop]: Abstraction has 762 states and 977 transitions. [2018-11-23 12:44:43,203 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:43,203 INFO L276 IsEmpty]: Start isEmpty. Operand 762 states and 977 transitions. [2018-11-23 12:44:43,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 12:44:43,204 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:43,204 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:43,205 INFO L423 AbstractCegarLoop]: === Iteration 38 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:43,205 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:43,205 INFO L82 PathProgramCache]: Analyzing trace with hash -1839036840, now seen corresponding path program 1 times [2018-11-23 12:44:43,205 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:43,205 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,206 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:43,206 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,206 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:43,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:43,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:43,317 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:43,317 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 12:44:43,318 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:43,318 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 12:44:43,318 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 12:44:43,318 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:43,318 INFO L87 Difference]: Start difference. First operand 762 states and 977 transitions. Second operand 13 states. [2018-11-23 12:44:43,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:43,487 INFO L93 Difference]: Finished difference Result 779 states and 995 transitions. [2018-11-23 12:44:43,487 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 12:44:43,487 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 63 [2018-11-23 12:44:43,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:43,489 INFO L225 Difference]: With dead ends: 779 [2018-11-23 12:44:43,489 INFO L226 Difference]: Without dead ends: 757 [2018-11-23 12:44:43,490 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 12:44:43,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 757 states. [2018-11-23 12:44:43,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 757 to 757. [2018-11-23 12:44:43,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 757 states. [2018-11-23 12:44:43,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 757 states to 757 states and 970 transitions. [2018-11-23 12:44:43,518 INFO L78 Accepts]: Start accepts. Automaton has 757 states and 970 transitions. Word has length 63 [2018-11-23 12:44:43,518 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:43,518 INFO L480 AbstractCegarLoop]: Abstraction has 757 states and 970 transitions. [2018-11-23 12:44:43,518 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 12:44:43,518 INFO L276 IsEmpty]: Start isEmpty. Operand 757 states and 970 transitions. [2018-11-23 12:44:43,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:44:43,519 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:43,520 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:43,520 INFO L423 AbstractCegarLoop]: === Iteration 39 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:43,520 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:43,520 INFO L82 PathProgramCache]: Analyzing trace with hash 1496662402, now seen corresponding path program 1 times [2018-11-23 12:44:43,520 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:43,521 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,521 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:43,521 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,521 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:43,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:43,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:43,640 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:43,640 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 12:44:43,640 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:43,641 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 12:44:43,641 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 12:44:43,641 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:43,641 INFO L87 Difference]: Start difference. First operand 757 states and 970 transitions. Second operand 13 states. [2018-11-23 12:44:43,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:43,822 INFO L93 Difference]: Finished difference Result 774 states and 988 transitions. [2018-11-23 12:44:43,823 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 12:44:43,823 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 69 [2018-11-23 12:44:43,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:43,824 INFO L225 Difference]: With dead ends: 774 [2018-11-23 12:44:43,825 INFO L226 Difference]: Without dead ends: 746 [2018-11-23 12:44:43,825 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 12:44:43,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 746 states. [2018-11-23 12:44:43,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 746 to 746. [2018-11-23 12:44:43,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 746 states. [2018-11-23 12:44:43,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 955 transitions. [2018-11-23 12:44:43,853 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 955 transitions. Word has length 69 [2018-11-23 12:44:43,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:43,853 INFO L480 AbstractCegarLoop]: Abstraction has 746 states and 955 transitions. [2018-11-23 12:44:43,853 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 12:44:43,853 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 955 transitions. [2018-11-23 12:44:43,854 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2018-11-23 12:44:43,855 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:43,855 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:43,855 INFO L423 AbstractCegarLoop]: === Iteration 40 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:43,855 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:43,855 INFO L82 PathProgramCache]: Analyzing trace with hash 81838798, now seen corresponding path program 1 times [2018-11-23 12:44:43,855 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:43,856 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,856 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:43,856 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:43,856 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:43,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:43,975 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:43,975 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:43,975 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 12:44:43,975 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:43,975 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 12:44:43,975 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 12:44:43,976 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:43,976 INFO L87 Difference]: Start difference. First operand 746 states and 955 transitions. Second operand 13 states. [2018-11-23 12:44:44,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:44,144 INFO L93 Difference]: Finished difference Result 763 states and 973 transitions. [2018-11-23 12:44:44,145 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 12:44:44,145 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 62 [2018-11-23 12:44:44,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:44,147 INFO L225 Difference]: With dead ends: 763 [2018-11-23 12:44:44,147 INFO L226 Difference]: Without dead ends: 738 [2018-11-23 12:44:44,148 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 12:44:44,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2018-11-23 12:44:44,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 738. [2018-11-23 12:44:44,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 738 states. [2018-11-23 12:44:44,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 945 transitions. [2018-11-23 12:44:44,175 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 945 transitions. Word has length 62 [2018-11-23 12:44:44,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:44,176 INFO L480 AbstractCegarLoop]: Abstraction has 738 states and 945 transitions. [2018-11-23 12:44:44,176 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 12:44:44,176 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 945 transitions. [2018-11-23 12:44:44,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 12:44:44,178 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:44,178 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:44,178 INFO L423 AbstractCegarLoop]: === Iteration 41 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:44,178 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:44,178 INFO L82 PathProgramCache]: Analyzing trace with hash -2087229698, now seen corresponding path program 1 times [2018-11-23 12:44:44,178 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:44,179 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,179 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:44,179 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,179 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:44,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:44,212 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:44,212 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:44,212 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:44,212 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:44,213 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:44,213 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:44,213 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:44,213 INFO L87 Difference]: Start difference. First operand 738 states and 945 transitions. Second operand 3 states. [2018-11-23 12:44:44,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:44,244 INFO L93 Difference]: Finished difference Result 868 states and 1118 transitions. [2018-11-23 12:44:44,244 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:44,245 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 66 [2018-11-23 12:44:44,245 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:44,246 INFO L225 Difference]: With dead ends: 868 [2018-11-23 12:44:44,246 INFO L226 Difference]: Without dead ends: 738 [2018-11-23 12:44:44,247 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:44,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2018-11-23 12:44:44,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 738. [2018-11-23 12:44:44,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 738 states. [2018-11-23 12:44:44,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 943 transitions. [2018-11-23 12:44:44,274 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 943 transitions. Word has length 66 [2018-11-23 12:44:44,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:44,274 INFO L480 AbstractCegarLoop]: Abstraction has 738 states and 943 transitions. [2018-11-23 12:44:44,274 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:44,275 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 943 transitions. [2018-11-23 12:44:44,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 12:44:44,276 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:44,276 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:44,276 INFO L423 AbstractCegarLoop]: === Iteration 42 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:44,276 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:44,276 INFO L82 PathProgramCache]: Analyzing trace with hash 398574068, now seen corresponding path program 1 times [2018-11-23 12:44:44,276 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:44,277 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,277 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:44,277 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,277 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:44,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:44,361 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:44,361 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:44,361 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 12:44:44,361 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:44,362 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 12:44:44,362 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 12:44:44,362 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 12:44:44,362 INFO L87 Difference]: Start difference. First operand 738 states and 943 transitions. Second operand 12 states. [2018-11-23 12:44:44,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:44,542 INFO L93 Difference]: Finished difference Result 760 states and 966 transitions. [2018-11-23 12:44:44,543 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 12:44:44,543 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 66 [2018-11-23 12:44:44,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:44,545 INFO L225 Difference]: With dead ends: 760 [2018-11-23 12:44:44,545 INFO L226 Difference]: Without dead ends: 736 [2018-11-23 12:44:44,545 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-23 12:44:44,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 736 states. [2018-11-23 12:44:44,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 736 to 731. [2018-11-23 12:44:44,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 731 states. [2018-11-23 12:44:44,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 731 states to 731 states and 931 transitions. [2018-11-23 12:44:44,572 INFO L78 Accepts]: Start accepts. Automaton has 731 states and 931 transitions. Word has length 66 [2018-11-23 12:44:44,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:44,572 INFO L480 AbstractCegarLoop]: Abstraction has 731 states and 931 transitions. [2018-11-23 12:44:44,572 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 12:44:44,572 INFO L276 IsEmpty]: Start isEmpty. Operand 731 states and 931 transitions. [2018-11-23 12:44:44,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 12:44:44,574 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:44,574 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:44,574 INFO L423 AbstractCegarLoop]: === Iteration 43 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:44,574 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:44,574 INFO L82 PathProgramCache]: Analyzing trace with hash -322329126, now seen corresponding path program 1 times [2018-11-23 12:44:44,574 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:44,575 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,575 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:44,575 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,575 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:44,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:44,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:44,606 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:44,606 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:44,606 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:44,606 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:44,606 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:44,607 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:44,607 INFO L87 Difference]: Start difference. First operand 731 states and 931 transitions. Second operand 5 states. [2018-11-23 12:44:44,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:44,652 INFO L93 Difference]: Finished difference Result 777 states and 978 transitions. [2018-11-23 12:44:44,652 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:44,653 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 65 [2018-11-23 12:44:44,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:44,654 INFO L225 Difference]: With dead ends: 777 [2018-11-23 12:44:44,654 INFO L226 Difference]: Without dead ends: 725 [2018-11-23 12:44:44,655 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:44,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 725 states. [2018-11-23 12:44:44,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 725 to 725. [2018-11-23 12:44:44,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 725 states. [2018-11-23 12:44:44,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 725 states to 725 states and 921 transitions. [2018-11-23 12:44:44,682 INFO L78 Accepts]: Start accepts. Automaton has 725 states and 921 transitions. Word has length 65 [2018-11-23 12:44:44,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:44,682 INFO L480 AbstractCegarLoop]: Abstraction has 725 states and 921 transitions. [2018-11-23 12:44:44,682 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:44,682 INFO L276 IsEmpty]: Start isEmpty. Operand 725 states and 921 transitions. [2018-11-23 12:44:44,684 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 12:44:44,684 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:44,684 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:44,684 INFO L423 AbstractCegarLoop]: === Iteration 44 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:44,684 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:44,684 INFO L82 PathProgramCache]: Analyzing trace with hash 1568772173, now seen corresponding path program 1 times [2018-11-23 12:44:44,684 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:44,685 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,685 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:44,685 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,685 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:44,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:44,723 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:44,723 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:44,724 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:44,724 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:44,724 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:44,724 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:44,724 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:44,724 INFO L87 Difference]: Start difference. First operand 725 states and 921 transitions. Second operand 5 states. [2018-11-23 12:44:44,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:44,768 INFO L93 Difference]: Finished difference Result 759 states and 956 transitions. [2018-11-23 12:44:44,768 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:44,768 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 67 [2018-11-23 12:44:44,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:44,770 INFO L225 Difference]: With dead ends: 759 [2018-11-23 12:44:44,770 INFO L226 Difference]: Without dead ends: 720 [2018-11-23 12:44:44,770 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:44,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 720 states. [2018-11-23 12:44:44,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 720 to 720. [2018-11-23 12:44:44,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 720 states. [2018-11-23 12:44:44,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 720 states to 720 states and 914 transitions. [2018-11-23 12:44:44,797 INFO L78 Accepts]: Start accepts. Automaton has 720 states and 914 transitions. Word has length 67 [2018-11-23 12:44:44,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:44,797 INFO L480 AbstractCegarLoop]: Abstraction has 720 states and 914 transitions. [2018-11-23 12:44:44,797 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:44,798 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 914 transitions. [2018-11-23 12:44:44,799 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 12:44:44,799 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:44,799 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:44,799 INFO L423 AbstractCegarLoop]: === Iteration 45 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:44,799 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:44,799 INFO L82 PathProgramCache]: Analyzing trace with hash -1402336471, now seen corresponding path program 1 times [2018-11-23 12:44:44,799 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:44,800 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,800 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:44,800 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:44,800 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:44,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:44,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:44,838 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:44,839 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:44,839 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:44,839 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:44,839 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:44,839 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:44,839 INFO L87 Difference]: Start difference. First operand 720 states and 914 transitions. Second operand 5 states. [2018-11-23 12:44:45,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:45,089 INFO L93 Difference]: Finished difference Result 803 states and 1021 transitions. [2018-11-23 12:44:45,089 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:45,089 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 68 [2018-11-23 12:44:45,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:45,090 INFO L225 Difference]: With dead ends: 803 [2018-11-23 12:44:45,091 INFO L226 Difference]: Without dead ends: 794 [2018-11-23 12:44:45,091 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:44:45,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 794 states. [2018-11-23 12:44:45,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 794 to 720. [2018-11-23 12:44:45,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 720 states. [2018-11-23 12:44:45,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 720 states to 720 states and 912 transitions. [2018-11-23 12:44:45,119 INFO L78 Accepts]: Start accepts. Automaton has 720 states and 912 transitions. Word has length 68 [2018-11-23 12:44:45,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:45,119 INFO L480 AbstractCegarLoop]: Abstraction has 720 states and 912 transitions. [2018-11-23 12:44:45,119 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:45,119 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 912 transitions. [2018-11-23 12:44:45,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 12:44:45,121 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:45,121 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:45,121 INFO L423 AbstractCegarLoop]: === Iteration 46 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:45,121 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:45,121 INFO L82 PathProgramCache]: Analyzing trace with hash 1734361953, now seen corresponding path program 1 times [2018-11-23 12:44:45,121 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:45,122 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,122 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:45,122 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,122 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:45,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:45,186 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:45,186 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:45,186 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 12:44:45,187 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:45,187 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 12:44:45,187 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 12:44:45,187 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:44:45,187 INFO L87 Difference]: Start difference. First operand 720 states and 912 transitions. Second operand 7 states. [2018-11-23 12:44:45,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:45,263 INFO L93 Difference]: Finished difference Result 766 states and 962 transitions. [2018-11-23 12:44:45,264 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 12:44:45,264 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 74 [2018-11-23 12:44:45,264 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:45,265 INFO L225 Difference]: With dead ends: 766 [2018-11-23 12:44:45,266 INFO L226 Difference]: Without dead ends: 726 [2018-11-23 12:44:45,266 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-11-23 12:44:45,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 726 states. [2018-11-23 12:44:45,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 726 to 724. [2018-11-23 12:44:45,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 724 states. [2018-11-23 12:44:45,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 724 states to 724 states and 916 transitions. [2018-11-23 12:44:45,294 INFO L78 Accepts]: Start accepts. Automaton has 724 states and 916 transitions. Word has length 74 [2018-11-23 12:44:45,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:45,295 INFO L480 AbstractCegarLoop]: Abstraction has 724 states and 916 transitions. [2018-11-23 12:44:45,295 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 12:44:45,295 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 916 transitions. [2018-11-23 12:44:45,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2018-11-23 12:44:45,296 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:45,296 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:45,296 INFO L423 AbstractCegarLoop]: === Iteration 47 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:45,296 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:45,297 INFO L82 PathProgramCache]: Analyzing trace with hash 127484813, now seen corresponding path program 1 times [2018-11-23 12:44:45,297 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:45,297 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,297 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:45,297 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,297 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:45,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:45,397 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:45,397 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:45,398 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-23 12:44:45,398 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:45,398 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-23 12:44:45,398 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-23 12:44:45,398 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2018-11-23 12:44:45,398 INFO L87 Difference]: Start difference. First operand 724 states and 916 transitions. Second operand 12 states. [2018-11-23 12:44:45,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:45,522 INFO L93 Difference]: Finished difference Result 747 states and 940 transitions. [2018-11-23 12:44:45,522 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-23 12:44:45,522 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 70 [2018-11-23 12:44:45,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:45,524 INFO L225 Difference]: With dead ends: 747 [2018-11-23 12:44:45,524 INFO L226 Difference]: Without dead ends: 724 [2018-11-23 12:44:45,525 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2018-11-23 12:44:45,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 724 states. [2018-11-23 12:44:45,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 724 to 724. [2018-11-23 12:44:45,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 724 states. [2018-11-23 12:44:45,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 724 states to 724 states and 915 transitions. [2018-11-23 12:44:45,563 INFO L78 Accepts]: Start accepts. Automaton has 724 states and 915 transitions. Word has length 70 [2018-11-23 12:44:45,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:45,563 INFO L480 AbstractCegarLoop]: Abstraction has 724 states and 915 transitions. [2018-11-23 12:44:45,563 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-23 12:44:45,563 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 915 transitions. [2018-11-23 12:44:45,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2018-11-23 12:44:45,564 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:45,564 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:45,564 INFO L423 AbstractCegarLoop]: === Iteration 48 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:45,565 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:45,565 INFO L82 PathProgramCache]: Analyzing trace with hash 829084687, now seen corresponding path program 1 times [2018-11-23 12:44:45,565 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:45,565 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,565 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:45,566 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,566 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:45,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:45,706 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:45,706 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:45,706 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 12:44:45,706 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:45,706 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 12:44:45,706 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 12:44:45,706 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 12:44:45,707 INFO L87 Difference]: Start difference. First operand 724 states and 915 transitions. Second operand 14 states. [2018-11-23 12:44:45,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:45,840 INFO L93 Difference]: Finished difference Result 748 states and 941 transitions. [2018-11-23 12:44:45,841 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 12:44:45,841 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 70 [2018-11-23 12:44:45,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:45,843 INFO L225 Difference]: With dead ends: 748 [2018-11-23 12:44:45,843 INFO L226 Difference]: Without dead ends: 720 [2018-11-23 12:44:45,844 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 12:44:45,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 720 states. [2018-11-23 12:44:45,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 720 to 720. [2018-11-23 12:44:45,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 720 states. [2018-11-23 12:44:45,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 720 states to 720 states and 909 transitions. [2018-11-23 12:44:45,876 INFO L78 Accepts]: Start accepts. Automaton has 720 states and 909 transitions. Word has length 70 [2018-11-23 12:44:45,876 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:45,876 INFO L480 AbstractCegarLoop]: Abstraction has 720 states and 909 transitions. [2018-11-23 12:44:45,876 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 12:44:45,877 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 909 transitions. [2018-11-23 12:44:45,878 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:44:45,878 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:45,878 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:45,878 INFO L423 AbstractCegarLoop]: === Iteration 49 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:45,878 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:45,878 INFO L82 PathProgramCache]: Analyzing trace with hash 77291112, now seen corresponding path program 1 times [2018-11-23 12:44:45,879 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:45,879 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,879 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:45,879 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:45,879 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:45,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:45,924 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:45,924 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:45,924 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:45,924 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:45,924 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:45,924 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:45,924 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:45,925 INFO L87 Difference]: Start difference. First operand 720 states and 909 transitions. Second operand 5 states. [2018-11-23 12:44:45,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:45,974 INFO L93 Difference]: Finished difference Result 754 states and 944 transitions. [2018-11-23 12:44:45,975 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:45,975 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 69 [2018-11-23 12:44:45,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:45,977 INFO L225 Difference]: With dead ends: 754 [2018-11-23 12:44:45,977 INFO L226 Difference]: Without dead ends: 715 [2018-11-23 12:44:45,977 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:45,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 715 states. [2018-11-23 12:44:46,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 715 to 715. [2018-11-23 12:44:46,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 715 states. [2018-11-23 12:44:46,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 715 states to 715 states and 902 transitions. [2018-11-23 12:44:46,007 INFO L78 Accepts]: Start accepts. Automaton has 715 states and 902 transitions. Word has length 69 [2018-11-23 12:44:46,007 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:46,007 INFO L480 AbstractCegarLoop]: Abstraction has 715 states and 902 transitions. [2018-11-23 12:44:46,007 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:46,007 INFO L276 IsEmpty]: Start isEmpty. Operand 715 states and 902 transitions. [2018-11-23 12:44:46,008 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:44:46,008 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:46,008 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:46,009 INFO L423 AbstractCegarLoop]: === Iteration 50 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:46,009 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:46,009 INFO L82 PathProgramCache]: Analyzing trace with hash 1952246579, now seen corresponding path program 1 times [2018-11-23 12:44:46,009 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:46,009 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,009 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:46,010 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,010 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:46,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:46,081 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:46,081 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:46,082 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 12:44:46,082 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:46,082 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 12:44:46,082 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 12:44:46,082 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:46,082 INFO L87 Difference]: Start difference. First operand 715 states and 902 transitions. Second operand 11 states. [2018-11-23 12:44:46,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:46,178 INFO L93 Difference]: Finished difference Result 742 states and 932 transitions. [2018-11-23 12:44:46,178 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 12:44:46,178 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 69 [2018-11-23 12:44:46,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:46,180 INFO L225 Difference]: With dead ends: 742 [2018-11-23 12:44:46,180 INFO L226 Difference]: Without dead ends: 712 [2018-11-23 12:44:46,180 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:46,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 712 states. [2018-11-23 12:44:46,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 712 to 712. [2018-11-23 12:44:46,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 712 states. [2018-11-23 12:44:46,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 712 states to 712 states and 897 transitions. [2018-11-23 12:44:46,214 INFO L78 Accepts]: Start accepts. Automaton has 712 states and 897 transitions. Word has length 69 [2018-11-23 12:44:46,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:46,214 INFO L480 AbstractCegarLoop]: Abstraction has 712 states and 897 transitions. [2018-11-23 12:44:46,214 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 12:44:46,214 INFO L276 IsEmpty]: Start isEmpty. Operand 712 states and 897 transitions. [2018-11-23 12:44:46,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:44:46,215 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:46,216 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:46,216 INFO L423 AbstractCegarLoop]: === Iteration 51 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:46,216 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:46,216 INFO L82 PathProgramCache]: Analyzing trace with hash -1163083894, now seen corresponding path program 1 times [2018-11-23 12:44:46,216 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:46,217 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,217 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:46,217 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,217 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:46,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:46,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:46,328 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:46,328 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 12:44:46,328 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:46,328 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 12:44:46,329 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 12:44:46,329 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:46,329 INFO L87 Difference]: Start difference. First operand 712 states and 897 transitions. Second operand 11 states. [2018-11-23 12:44:46,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:46,516 INFO L93 Difference]: Finished difference Result 722 states and 906 transitions. [2018-11-23 12:44:46,517 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 12:44:46,517 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 69 [2018-11-23 12:44:46,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:46,518 INFO L225 Difference]: With dead ends: 722 [2018-11-23 12:44:46,518 INFO L226 Difference]: Without dead ends: 716 [2018-11-23 12:44:46,519 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:46,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 716 states. [2018-11-23 12:44:46,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 716 to 709. [2018-11-23 12:44:46,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 709 states. [2018-11-23 12:44:46,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 709 states to 709 states and 890 transitions. [2018-11-23 12:44:46,567 INFO L78 Accepts]: Start accepts. Automaton has 709 states and 890 transitions. Word has length 69 [2018-11-23 12:44:46,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:46,567 INFO L480 AbstractCegarLoop]: Abstraction has 709 states and 890 transitions. [2018-11-23 12:44:46,567 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 12:44:46,567 INFO L276 IsEmpty]: Start isEmpty. Operand 709 states and 890 transitions. [2018-11-23 12:44:46,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:44:46,568 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:46,568 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:46,569 INFO L423 AbstractCegarLoop]: === Iteration 52 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:46,569 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:46,569 INFO L82 PathProgramCache]: Analyzing trace with hash -1163360724, now seen corresponding path program 1 times [2018-11-23 12:44:46,569 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:46,569 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,569 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:46,570 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,570 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:46,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:46,600 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:46,601 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:46,601 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:46,601 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:46,601 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:46,601 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:46,601 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:46,601 INFO L87 Difference]: Start difference. First operand 709 states and 890 transitions. Second operand 5 states. [2018-11-23 12:44:46,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:46,913 INFO L93 Difference]: Finished difference Result 786 states and 991 transitions. [2018-11-23 12:44:46,913 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:46,914 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 69 [2018-11-23 12:44:46,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:46,915 INFO L225 Difference]: With dead ends: 786 [2018-11-23 12:44:46,915 INFO L226 Difference]: Without dead ends: 751 [2018-11-23 12:44:46,915 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:44:46,916 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 751 states. [2018-11-23 12:44:46,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 751 to 680. [2018-11-23 12:44:46,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 680 states. [2018-11-23 12:44:46,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 680 states to 680 states and 854 transitions. [2018-11-23 12:44:46,947 INFO L78 Accepts]: Start accepts. Automaton has 680 states and 854 transitions. Word has length 69 [2018-11-23 12:44:46,947 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:46,947 INFO L480 AbstractCegarLoop]: Abstraction has 680 states and 854 transitions. [2018-11-23 12:44:46,947 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:46,947 INFO L276 IsEmpty]: Start isEmpty. Operand 680 states and 854 transitions. [2018-11-23 12:44:46,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:44:46,948 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:46,948 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:46,948 INFO L423 AbstractCegarLoop]: === Iteration 53 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:46,948 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:46,948 INFO L82 PathProgramCache]: Analyzing trace with hash -1070160589, now seen corresponding path program 1 times [2018-11-23 12:44:46,948 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:46,949 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,949 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:46,949 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:46,949 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:46,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:46,984 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:46,984 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:46,984 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:44:46,984 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:46,984 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:44:46,985 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:44:46,985 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:46,985 INFO L87 Difference]: Start difference. First operand 680 states and 854 transitions. Second operand 3 states. [2018-11-23 12:44:47,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:47,050 INFO L93 Difference]: Finished difference Result 706 states and 884 transitions. [2018-11-23 12:44:47,050 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:44:47,050 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 69 [2018-11-23 12:44:47,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:47,052 INFO L225 Difference]: With dead ends: 706 [2018-11-23 12:44:47,052 INFO L226 Difference]: Without dead ends: 666 [2018-11-23 12:44:47,052 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:44:47,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2018-11-23 12:44:47,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 662. [2018-11-23 12:44:47,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 662 states. [2018-11-23 12:44:47,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 662 states to 662 states and 829 transitions. [2018-11-23 12:44:47,079 INFO L78 Accepts]: Start accepts. Automaton has 662 states and 829 transitions. Word has length 69 [2018-11-23 12:44:47,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:47,079 INFO L480 AbstractCegarLoop]: Abstraction has 662 states and 829 transitions. [2018-11-23 12:44:47,080 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:44:47,080 INFO L276 IsEmpty]: Start isEmpty. Operand 662 states and 829 transitions. [2018-11-23 12:44:47,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 12:44:47,081 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:47,081 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:47,081 INFO L423 AbstractCegarLoop]: === Iteration 54 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:47,081 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:47,081 INFO L82 PathProgramCache]: Analyzing trace with hash -1859005469, now seen corresponding path program 1 times [2018-11-23 12:44:47,081 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:47,082 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,082 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:47,082 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,082 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:47,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:47,190 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:47,190 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:47,190 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 12:44:47,190 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:47,191 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 12:44:47,191 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 12:44:47,191 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 12:44:47,191 INFO L87 Difference]: Start difference. First operand 662 states and 829 transitions. Second operand 14 states. [2018-11-23 12:44:47,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:47,327 INFO L93 Difference]: Finished difference Result 684 states and 852 transitions. [2018-11-23 12:44:47,327 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 12:44:47,327 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 74 [2018-11-23 12:44:47,328 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:47,329 INFO L225 Difference]: With dead ends: 684 [2018-11-23 12:44:47,329 INFO L226 Difference]: Without dead ends: 652 [2018-11-23 12:44:47,329 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 12:44:47,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2018-11-23 12:44:47,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 652. [2018-11-23 12:44:47,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 652 states. [2018-11-23 12:44:47,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 652 states to 652 states and 814 transitions. [2018-11-23 12:44:47,373 INFO L78 Accepts]: Start accepts. Automaton has 652 states and 814 transitions. Word has length 74 [2018-11-23 12:44:47,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:47,373 INFO L480 AbstractCegarLoop]: Abstraction has 652 states and 814 transitions. [2018-11-23 12:44:47,373 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 12:44:47,373 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 814 transitions. [2018-11-23 12:44:47,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 12:44:47,374 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:47,374 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:47,374 INFO L423 AbstractCegarLoop]: === Iteration 55 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:47,374 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:47,374 INFO L82 PathProgramCache]: Analyzing trace with hash -81188571, now seen corresponding path program 1 times [2018-11-23 12:44:47,375 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:47,375 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,375 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:47,375 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,375 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:47,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:47,490 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:47,490 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:47,490 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 12:44:47,490 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:47,490 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 12:44:47,491 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 12:44:47,491 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 12:44:47,491 INFO L87 Difference]: Start difference. First operand 652 states and 814 transitions. Second operand 14 states. [2018-11-23 12:44:47,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:47,644 INFO L93 Difference]: Finished difference Result 716 states and 882 transitions. [2018-11-23 12:44:47,644 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 12:44:47,644 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 71 [2018-11-23 12:44:47,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:47,645 INFO L225 Difference]: With dead ends: 716 [2018-11-23 12:44:47,645 INFO L226 Difference]: Without dead ends: 646 [2018-11-23 12:44:47,646 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 12:44:47,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 646 states. [2018-11-23 12:44:47,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 646 to 646. [2018-11-23 12:44:47,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 646 states. [2018-11-23 12:44:47,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 805 transitions. [2018-11-23 12:44:47,690 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 805 transitions. Word has length 71 [2018-11-23 12:44:47,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:47,690 INFO L480 AbstractCegarLoop]: Abstraction has 646 states and 805 transitions. [2018-11-23 12:44:47,691 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 12:44:47,691 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 805 transitions. [2018-11-23 12:44:47,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 12:44:47,692 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:47,692 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:47,692 INFO L423 AbstractCegarLoop]: === Iteration 56 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:47,692 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:47,692 INFO L82 PathProgramCache]: Analyzing trace with hash -37760830, now seen corresponding path program 1 times [2018-11-23 12:44:47,692 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:47,693 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,693 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:47,693 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,693 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:47,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:47,743 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:47,743 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:47,743 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:47,743 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:47,743 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:47,743 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:47,743 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:47,744 INFO L87 Difference]: Start difference. First operand 646 states and 805 transitions. Second operand 5 states. [2018-11-23 12:44:47,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:47,811 INFO L93 Difference]: Finished difference Result 693 states and 854 transitions. [2018-11-23 12:44:47,811 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:47,811 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2018-11-23 12:44:47,812 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:47,813 INFO L225 Difference]: With dead ends: 693 [2018-11-23 12:44:47,813 INFO L226 Difference]: Without dead ends: 650 [2018-11-23 12:44:47,814 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:47,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650 states. [2018-11-23 12:44:47,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650 to 646. [2018-11-23 12:44:47,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 646 states. [2018-11-23 12:44:47,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 804 transitions. [2018-11-23 12:44:47,845 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 804 transitions. Word has length 71 [2018-11-23 12:44:47,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:47,845 INFO L480 AbstractCegarLoop]: Abstraction has 646 states and 804 transitions. [2018-11-23 12:44:47,845 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:47,845 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 804 transitions. [2018-11-23 12:44:47,845 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 12:44:47,845 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:47,846 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:47,846 INFO L423 AbstractCegarLoop]: === Iteration 57 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:47,846 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:47,846 INFO L82 PathProgramCache]: Analyzing trace with hash 2013223168, now seen corresponding path program 1 times [2018-11-23 12:44:47,846 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:47,846 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,846 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:47,846 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:47,847 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:47,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:47,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:47,950 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:47,950 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 12:44:47,950 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:47,950 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 12:44:47,951 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 12:44:47,951 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 12:44:47,951 INFO L87 Difference]: Start difference. First operand 646 states and 804 transitions. Second operand 14 states. [2018-11-23 12:44:48,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:48,077 INFO L93 Difference]: Finished difference Result 670 states and 830 transitions. [2018-11-23 12:44:48,077 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 12:44:48,078 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 71 [2018-11-23 12:44:48,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:48,079 INFO L225 Difference]: With dead ends: 670 [2018-11-23 12:44:48,079 INFO L226 Difference]: Without dead ends: 639 [2018-11-23 12:44:48,079 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 12:44:48,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 639 states. [2018-11-23 12:44:48,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 639 to 639. [2018-11-23 12:44:48,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 639 states. [2018-11-23 12:44:48,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 639 states to 639 states and 794 transitions. [2018-11-23 12:44:48,105 INFO L78 Accepts]: Start accepts. Automaton has 639 states and 794 transitions. Word has length 71 [2018-11-23 12:44:48,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:48,105 INFO L480 AbstractCegarLoop]: Abstraction has 639 states and 794 transitions. [2018-11-23 12:44:48,105 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 12:44:48,105 INFO L276 IsEmpty]: Start isEmpty. Operand 639 states and 794 transitions. [2018-11-23 12:44:48,106 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-11-23 12:44:48,106 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:48,106 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:48,106 INFO L423 AbstractCegarLoop]: === Iteration 58 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:48,106 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:48,107 INFO L82 PathProgramCache]: Analyzing trace with hash -1067828418, now seen corresponding path program 1 times [2018-11-23 12:44:48,107 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:48,107 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,107 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:48,107 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,107 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:48,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:48,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:48,177 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:48,177 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 12:44:48,177 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:48,177 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 12:44:48,178 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 12:44:48,178 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:44:48,178 INFO L87 Difference]: Start difference. First operand 639 states and 794 transitions. Second operand 7 states. [2018-11-23 12:44:48,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:48,242 INFO L93 Difference]: Finished difference Result 693 states and 855 transitions. [2018-11-23 12:44:48,243 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 12:44:48,243 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 77 [2018-11-23 12:44:48,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:48,245 INFO L225 Difference]: With dead ends: 693 [2018-11-23 12:44:48,245 INFO L226 Difference]: Without dead ends: 637 [2018-11-23 12:44:48,245 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-11-23 12:44:48,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 637 states. [2018-11-23 12:44:48,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 637 to 633. [2018-11-23 12:44:48,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 633 states. [2018-11-23 12:44:48,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 633 states and 784 transitions. [2018-11-23 12:44:48,271 INFO L78 Accepts]: Start accepts. Automaton has 633 states and 784 transitions. Word has length 77 [2018-11-23 12:44:48,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:48,272 INFO L480 AbstractCegarLoop]: Abstraction has 633 states and 784 transitions. [2018-11-23 12:44:48,272 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 12:44:48,272 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 784 transitions. [2018-11-23 12:44:48,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-11-23 12:44:48,273 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:48,273 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:48,273 INFO L423 AbstractCegarLoop]: === Iteration 59 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:48,273 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:48,273 INFO L82 PathProgramCache]: Analyzing trace with hash -366228544, now seen corresponding path program 1 times [2018-11-23 12:44:48,273 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:48,274 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,274 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:48,274 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,274 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:48,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:48,365 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:48,365 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:48,366 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 12:44:48,366 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:48,366 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 12:44:48,366 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 12:44:48,366 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 12:44:48,366 INFO L87 Difference]: Start difference. First operand 633 states and 784 transitions. Second operand 14 states. [2018-11-23 12:44:48,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:48,512 INFO L93 Difference]: Finished difference Result 659 states and 812 transitions. [2018-11-23 12:44:48,513 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 12:44:48,513 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 77 [2018-11-23 12:44:48,513 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:48,514 INFO L225 Difference]: With dead ends: 659 [2018-11-23 12:44:48,514 INFO L226 Difference]: Without dead ends: 635 [2018-11-23 12:44:48,515 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 12:44:48,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 635 states. [2018-11-23 12:44:48,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 635 to 631. [2018-11-23 12:44:48,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 631 states. [2018-11-23 12:44:48,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 631 states to 631 states and 780 transitions. [2018-11-23 12:44:48,540 INFO L78 Accepts]: Start accepts. Automaton has 631 states and 780 transitions. Word has length 77 [2018-11-23 12:44:48,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:48,540 INFO L480 AbstractCegarLoop]: Abstraction has 631 states and 780 transitions. [2018-11-23 12:44:48,540 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 12:44:48,540 INFO L276 IsEmpty]: Start isEmpty. Operand 631 states and 780 transitions. [2018-11-23 12:44:48,541 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 12:44:48,541 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:48,541 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:48,542 INFO L423 AbstractCegarLoop]: === Iteration 60 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:48,542 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:48,542 INFO L82 PathProgramCache]: Analyzing trace with hash -615466654, now seen corresponding path program 1 times [2018-11-23 12:44:48,542 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:48,542 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,542 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:48,543 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,543 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:48,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:48,636 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:48,636 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:48,636 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2018-11-23 12:44:48,636 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:48,636 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-23 12:44:48,636 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-23 12:44:48,637 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2018-11-23 12:44:48,637 INFO L87 Difference]: Start difference. First operand 631 states and 780 transitions. Second operand 14 states. [2018-11-23 12:44:48,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:48,743 INFO L93 Difference]: Finished difference Result 690 states and 842 transitions. [2018-11-23 12:44:48,744 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-23 12:44:48,744 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 72 [2018-11-23 12:44:48,744 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:48,746 INFO L225 Difference]: With dead ends: 690 [2018-11-23 12:44:48,746 INFO L226 Difference]: Without dead ends: 619 [2018-11-23 12:44:48,746 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 12:44:48,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 619 states. [2018-11-23 12:44:48,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 619 to 619. [2018-11-23 12:44:48,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 619 states. [2018-11-23 12:44:48,772 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 619 states to 619 states and 761 transitions. [2018-11-23 12:44:48,772 INFO L78 Accepts]: Start accepts. Automaton has 619 states and 761 transitions. Word has length 72 [2018-11-23 12:44:48,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:48,772 INFO L480 AbstractCegarLoop]: Abstraction has 619 states and 761 transitions. [2018-11-23 12:44:48,772 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-23 12:44:48,772 INFO L276 IsEmpty]: Start isEmpty. Operand 619 states and 761 transitions. [2018-11-23 12:44:48,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 12:44:48,773 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:48,774 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:48,774 INFO L423 AbstractCegarLoop]: === Iteration 61 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:48,774 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:48,774 INFO L82 PathProgramCache]: Analyzing trace with hash -2025859791, now seen corresponding path program 1 times [2018-11-23 12:44:48,774 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:48,774 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,775 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:48,775 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,775 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:48,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:48,860 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:48,860 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:48,860 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-23 12:44:48,860 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:48,860 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-23 12:44:48,861 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-23 12:44:48,861 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-23 12:44:48,861 INFO L87 Difference]: Start difference. First operand 619 states and 761 transitions. Second operand 11 states. [2018-11-23 12:44:48,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:48,933 INFO L93 Difference]: Finished difference Result 810 states and 988 transitions. [2018-11-23 12:44:48,933 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-23 12:44:48,933 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 71 [2018-11-23 12:44:48,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:48,934 INFO L225 Difference]: With dead ends: 810 [2018-11-23 12:44:48,934 INFO L226 Difference]: Without dead ends: 661 [2018-11-23 12:44:48,935 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:48,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 661 states. [2018-11-23 12:44:48,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 661 to 625. [2018-11-23 12:44:48,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 625 states. [2018-11-23 12:44:48,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 625 states to 625 states and 763 transitions. [2018-11-23 12:44:48,971 INFO L78 Accepts]: Start accepts. Automaton has 625 states and 763 transitions. Word has length 71 [2018-11-23 12:44:48,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:48,971 INFO L480 AbstractCegarLoop]: Abstraction has 625 states and 763 transitions. [2018-11-23 12:44:48,971 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-23 12:44:48,972 INFO L276 IsEmpty]: Start isEmpty. Operand 625 states and 763 transitions. [2018-11-23 12:44:48,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 12:44:48,972 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:48,972 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:48,972 INFO L423 AbstractCegarLoop]: === Iteration 62 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:48,973 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:48,973 INFO L82 PathProgramCache]: Analyzing trace with hash -1771854681, now seen corresponding path program 1 times [2018-11-23 12:44:48,973 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:48,973 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,973 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:48,973 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:48,973 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:48,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:49,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:49,136 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:49,136 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 12:44:49,136 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:49,139 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 12:44:49,139 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 12:44:49,139 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:49,140 INFO L87 Difference]: Start difference. First operand 625 states and 763 transitions. Second operand 13 states. [2018-11-23 12:44:49,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:49,320 INFO L93 Difference]: Finished difference Result 645 states and 784 transitions. [2018-11-23 12:44:49,320 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 12:44:49,320 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 79 [2018-11-23 12:44:49,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:49,321 INFO L225 Difference]: With dead ends: 645 [2018-11-23 12:44:49,321 INFO L226 Difference]: Without dead ends: 620 [2018-11-23 12:44:49,322 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 12:44:49,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 620 states. [2018-11-23 12:44:49,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 620 to 620. [2018-11-23 12:44:49,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 620 states. [2018-11-23 12:44:49,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 620 states to 620 states and 755 transitions. [2018-11-23 12:44:49,347 INFO L78 Accepts]: Start accepts. Automaton has 620 states and 755 transitions. Word has length 79 [2018-11-23 12:44:49,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:49,347 INFO L480 AbstractCegarLoop]: Abstraction has 620 states and 755 transitions. [2018-11-23 12:44:49,347 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 12:44:49,347 INFO L276 IsEmpty]: Start isEmpty. Operand 620 states and 755 transitions. [2018-11-23 12:44:49,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 12:44:49,348 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:49,348 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:49,348 INFO L423 AbstractCegarLoop]: === Iteration 63 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:49,349 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:49,349 INFO L82 PathProgramCache]: Analyzing trace with hash -253233342, now seen corresponding path program 1 times [2018-11-23 12:44:49,349 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:49,349 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:49,349 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:49,349 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:49,350 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:49,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:49,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:49,467 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:49,467 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2018-11-23 12:44:49,467 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:49,467 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-23 12:44:49,467 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-23 12:44:49,468 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2018-11-23 12:44:49,468 INFO L87 Difference]: Start difference. First operand 620 states and 755 transitions. Second operand 13 states. [2018-11-23 12:44:49,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:49,602 INFO L93 Difference]: Finished difference Result 622 states and 756 transitions. [2018-11-23 12:44:49,603 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-23 12:44:49,603 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 72 [2018-11-23 12:44:49,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:49,604 INFO L225 Difference]: With dead ends: 622 [2018-11-23 12:44:49,604 INFO L226 Difference]: Without dead ends: 571 [2018-11-23 12:44:49,604 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2018-11-23 12:44:49,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 571 states. [2018-11-23 12:44:49,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 571 to 571. [2018-11-23 12:44:49,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 571 states. [2018-11-23 12:44:49,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 571 states to 571 states and 701 transitions. [2018-11-23 12:44:49,628 INFO L78 Accepts]: Start accepts. Automaton has 571 states and 701 transitions. Word has length 72 [2018-11-23 12:44:49,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:49,628 INFO L480 AbstractCegarLoop]: Abstraction has 571 states and 701 transitions. [2018-11-23 12:44:49,628 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-23 12:44:49,628 INFO L276 IsEmpty]: Start isEmpty. Operand 571 states and 701 transitions. [2018-11-23 12:44:49,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 12:44:49,629 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:49,629 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:49,629 INFO L423 AbstractCegarLoop]: === Iteration 64 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:49,630 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:49,630 INFO L82 PathProgramCache]: Analyzing trace with hash 1632556457, now seen corresponding path program 1 times [2018-11-23 12:44:49,630 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:49,630 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:49,630 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:49,630 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:49,631 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:49,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:49,696 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:49,696 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:49,696 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-23 12:44:49,696 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:49,697 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-23 12:44:49,697 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-23 12:44:49,697 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-23 12:44:49,697 INFO L87 Difference]: Start difference. First operand 571 states and 701 transitions. Second operand 10 states. [2018-11-23 12:44:50,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:50,479 INFO L93 Difference]: Finished difference Result 1187 states and 1450 transitions. [2018-11-23 12:44:50,479 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-11-23 12:44:50,479 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 73 [2018-11-23 12:44:50,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:50,481 INFO L225 Difference]: With dead ends: 1187 [2018-11-23 12:44:50,481 INFO L226 Difference]: Without dead ends: 1040 [2018-11-23 12:44:50,481 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=85, Invalid=335, Unknown=0, NotChecked=0, Total=420 [2018-11-23 12:44:50,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1040 states. [2018-11-23 12:44:50,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1040 to 905. [2018-11-23 12:44:50,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 905 states. [2018-11-23 12:44:50,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 905 states to 905 states and 1131 transitions. [2018-11-23 12:44:50,520 INFO L78 Accepts]: Start accepts. Automaton has 905 states and 1131 transitions. Word has length 73 [2018-11-23 12:44:50,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:50,520 INFO L480 AbstractCegarLoop]: Abstraction has 905 states and 1131 transitions. [2018-11-23 12:44:50,520 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-23 12:44:50,521 INFO L276 IsEmpty]: Start isEmpty. Operand 905 states and 1131 transitions. [2018-11-23 12:44:50,522 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 12:44:50,522 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:50,522 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:50,522 INFO L423 AbstractCegarLoop]: === Iteration 65 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:50,522 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:50,522 INFO L82 PathProgramCache]: Analyzing trace with hash -1983138585, now seen corresponding path program 1 times [2018-11-23 12:44:50,522 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:50,523 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:50,523 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:50,523 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:50,523 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:50,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:50,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:50,591 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:50,591 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 12:44:50,591 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:50,591 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 12:44:50,592 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 12:44:50,592 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:44:50,592 INFO L87 Difference]: Start difference. First operand 905 states and 1131 transitions. Second operand 6 states. [2018-11-23 12:44:50,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:50,993 INFO L93 Difference]: Finished difference Result 1185 states and 1442 transitions. [2018-11-23 12:44:50,993 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 12:44:50,993 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 73 [2018-11-23 12:44:50,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:50,994 INFO L225 Difference]: With dead ends: 1185 [2018-11-23 12:44:50,994 INFO L226 Difference]: Without dead ends: 1055 [2018-11-23 12:44:50,995 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:44:50,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1055 states. [2018-11-23 12:44:51,043 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1055 to 994. [2018-11-23 12:44:51,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 994 states. [2018-11-23 12:44:51,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 994 states to 994 states and 1235 transitions. [2018-11-23 12:44:51,045 INFO L78 Accepts]: Start accepts. Automaton has 994 states and 1235 transitions. Word has length 73 [2018-11-23 12:44:51,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:51,045 INFO L480 AbstractCegarLoop]: Abstraction has 994 states and 1235 transitions. [2018-11-23 12:44:51,045 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 12:44:51,045 INFO L276 IsEmpty]: Start isEmpty. Operand 994 states and 1235 transitions. [2018-11-23 12:44:51,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 12:44:51,046 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:51,046 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:51,046 INFO L423 AbstractCegarLoop]: === Iteration 66 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:51,046 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:51,046 INFO L82 PathProgramCache]: Analyzing trace with hash -1013991573, now seen corresponding path program 1 times [2018-11-23 12:44:51,046 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:51,047 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:51,047 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:51,047 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:51,047 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:51,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:44:51,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:44:51,093 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:44:51,093 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:44:51,093 INFO L256 anRefinementStrategy]: Using the first perfect interpolant sequence [2018-11-23 12:44:51,094 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:44:51,094 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:44:51,094 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:51,094 INFO L87 Difference]: Start difference. First operand 994 states and 1235 transitions. Second operand 5 states. [2018-11-23 12:44:51,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:44:51,145 INFO L93 Difference]: Finished difference Result 1039 states and 1283 transitions. [2018-11-23 12:44:51,145 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:44:51,145 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 73 [2018-11-23 12:44:51,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:44:51,147 INFO L225 Difference]: With dead ends: 1039 [2018-11-23 12:44:51,147 INFO L226 Difference]: Without dead ends: 974 [2018-11-23 12:44:51,148 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:44:51,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 974 states. [2018-11-23 12:44:51,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 974 to 974. [2018-11-23 12:44:51,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 974 states. [2018-11-23 12:44:51,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 974 states to 974 states and 1207 transitions. [2018-11-23 12:44:51,191 INFO L78 Accepts]: Start accepts. Automaton has 974 states and 1207 transitions. Word has length 73 [2018-11-23 12:44:51,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:44:51,192 INFO L480 AbstractCegarLoop]: Abstraction has 974 states and 1207 transitions. [2018-11-23 12:44:51,192 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:44:51,192 INFO L276 IsEmpty]: Start isEmpty. Operand 974 states and 1207 transitions. [2018-11-23 12:44:51,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 12:44:51,193 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:44:51,193 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:44:51,193 INFO L423 AbstractCegarLoop]: === Iteration 67 === [errorFnErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:44:51,193 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:44:51,194 INFO L82 PathProgramCache]: Analyzing trace with hash -1533375131, now seen corresponding path program 1 times [2018-11-23 12:44:51,194 INFO L69 tionRefinementEngine]: Using refinement strategy TaipanRefinementStrategy [2018-11-23 12:44:51,194 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:51,194 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:44:51,194 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:44:51,194 INFO L286 anRefinementStrategy]: Using traceCheck mode SMTINTERPOL with AssertCodeBlockOrder NOT_INCREMENTALLY (IT: Craig_TreeInterpolation) [2018-11-23 12:44:51,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:44:51,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:44:51,246 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [?] ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 0;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 0; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET #1504#return; VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647;~d~0 := #t~nondet150;havoc #t~nondet150;assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647;~status~9 := #t~nondet151;havoc #t~nondet151;assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647;~irp~1 := #t~nondet152;havoc #t~nondet152;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;~we_should_unload~0 := #t~nondet153;havoc #t~nondet153;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~irp_choice~0 := #t~nondet154;havoc #t~nondet154;assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~devobj~0 := #t~nondet155;havoc #t~nondet155;havoc ~__cil_tmp9~1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 5;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 1;~pirp~0 := ~irp~1; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] CALL call _BLAST_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] RET #1370#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume ~status~9 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call stub_driver_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1372#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~status~9 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~tmp_ndt_1~0 := #t~nondet156;havoc #t~nondet156; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 2 == ~tmp_ndt_1~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [|CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~deviceExtension__Active~1 := #t~nondet26;havoc #t~nondet26;havoc ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(2 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(1 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 7 == ~deviceExtension__Active~1; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [|CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136;havoc #t~nondet136;assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet137;havoc #t~nondet137;havoc ~irpSp__Control~0;havoc ~tmp~6;havoc ~tmp___0~3;havoc ~__cil_tmp8~0;havoc ~__cil_tmp9~0;havoc ~__cil_tmp10~2;havoc ~__cil_tmp11~2;havoc ~__cil_tmp12~1;~__cil_tmp8~0 := 56;~__cil_tmp9~0 := 16384;~__cil_tmp10~2 := 131072;~__cil_tmp11~2 := 147456;~__cil_tmp12~1 := 147512; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~s~0 != ~NP~0); VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~irpSp__Control~0 := 224; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [|IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647;~Irp__PendingReturned~1 := #t~nondet162;havoc #t~nondet162;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647;~lcontext~0 := #t~nondet163;havoc #t~nondet163;havoc ~__cil_tmp8~1; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~compRegistered~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~routine~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [|HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647;~Irp__PendingReturned~0 := #t~nondet134;havoc #t~nondet134;assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135;havoc #t~nondet135; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~Irp__PendingReturned~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~pended~0;~pended~0 := 1; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~myStatus~0 >= 0); VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] #res := ~myStatus~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1474#return; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#t~ret164|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647;~compRetStatus~0 := #t~ret164;havoc #t~ret164; VAL [IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~Irp__PendingReturned~1);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647;~tmp_ndt_4~0 := #t~nondet166;havoc #t~nondet166; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~tmp_ndt_4~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~returnVal2~0 := 0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1408#return; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#t~ret138|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647;~tmp~6 := #t~ret138;havoc #t~ret138;#res := ~tmp~6; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1500#return; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#t~ret30|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;~status~3 := #t~ret30;havoc #t~ret30; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1374#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |main_#t~ret159|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647;~status~9 := #t~ret159;havoc #t~ret159; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(0 != ~we_should_unload~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~NP~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~MPR3~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~UNLOADED~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -1 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~SKIP2~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 != ~IPC~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(1 != ~pended~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 259 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call errorFn(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !false; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L31] int s ; [L32] int UNLOADED ; [L33] int NP ; [L34] int DC ; [L35] int SKIP1 ; [L36] int SKIP2 ; [L37] int MPR1 ; [L38] int MPR3 ; [L39] int IPC ; [L40] int pended ; [L41] int compFptr ; [L42] int compRegistered ; [L43] int lowerDriverReturn ; [L44] int setEventCalled ; [L45] int customIrp ; [L46] int routine ; [L47] int myStatus ; [L48] int pirp ; [L49] int Executive ; [L50] int Suspended ; [L51] int KernelMode ; [L52] int DeviceUsageTypePaging ; VAL [\old(compFptr)=276, \old(compRegistered)=265, \old(customIrp)=268, \old(DC)=261, \old(DeviceUsageTypePaging)=273, \old(Executive)=266, \old(IPC)=262, \old(KernelMode)=281, \old(lowerDriverReturn)=279, \old(MPR1)=275, \old(MPR3)=271, \old(myStatus)=278, \old(NP)=267, \old(pended)=280, \old(pirp)=272, \old(routine)=269, \old(s)=263, \old(setEventCalled)=274, \old(SKIP1)=270, \old(SKIP2)=264, \old(Suspended)=277, \old(UNLOADED)=260, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=0, UNLOADED=0] [L1717] int pirp__IoStatus__Status ; [L1718] int d = __VERIFIER_nondet_int() ; [L1719] int status = __VERIFIER_nondet_int() ; [L1720] int irp = __VERIFIER_nondet_int() ; [L1721] int we_should_unload = __VERIFIER_nondet_int() ; [L1722] int irp_choice = __VERIFIER_nondet_int() ; [L1723] int devobj = __VERIFIER_nondet_int() ; [L1724] int __cil_tmp9 ; [L1729] s = 0 [L1730] UNLOADED = 0 [L1731] NP = 0 [L1732] DC = 0 [L1733] SKIP1 = 0 [L1734] SKIP2 = 0 [L1735] MPR1 = 0 [L1736] MPR3 = 0 [L1737] IPC = 0 [L1738] pended = 0 [L1739] compFptr = 0 [L1740] compRegistered = 0 [L1741] lowerDriverReturn = 0 [L1742] setEventCalled = 0 [L1743] customIrp = 0 [L1744] routine = 0 [L1745] myStatus = 0 [L1746] pirp = 0 [L1747] Executive = 0 [L1748] Suspended = 5 [L1749] KernelMode = 0 [L1750] DeviceUsageTypePaging = 1 [L1753] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=0, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1754] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=5, UNLOADED=0] [L66] UNLOADED = 0 [L67] NP = 1 [L68] DC = 2 [L69] SKIP1 = 3 [L70] SKIP2 = 4 [L71] MPR1 = 5 [L72] MPR3 = 6 [L73] IPC = 7 [L74] s = UNLOADED [L75] pended = 0 [L76] compFptr = 0 [L77] compRegistered = 0 [L78] lowerDriverReturn = 0 [L79] setEventCalled = 0 [L80] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1754] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1756] COND TRUE status >= 0 [L1757] s = NP [L1758] customIrp = 0 [L1759] setEventCalled = customIrp [L1760] lowerDriverReturn = setEventCalled [L1761] compRegistered = lowerDriverReturn [L1762] compFptr = compRegistered [L1763] pended = compFptr [L1764] pirp__IoStatus__Status = 0 [L1765] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1766] COND TRUE irp_choice == 0 [L1767] pirp__IoStatus__Status = -1073741637 [L1768] myStatus = -1073741637 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1771] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1706] s = NP [L1707] customIrp = 0 [L1708] setEventCalled = customIrp [L1709] lowerDriverReturn = setEventCalled [L1710] compRegistered = lowerDriverReturn [L1711] compFptr = compRegistered [L1712] pended = compFptr VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1771] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1774] COND FALSE !(status < 0) [L1778] int tmp_ndt_1; [L1779] tmp_ndt_1 = __VERIFIER_nondet_int() [L1780] COND TRUE tmp_ndt_1 == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] CALL, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L312] int deviceExtension__Active = __VERIFIER_nondet_int() ; [L313] int status ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L316] COND FALSE !(deviceExtension__Active == 2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L319] COND FALSE !(deviceExtension__Active == 3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L322] COND FALSE !(deviceExtension__Active == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L325] COND TRUE deviceExtension__Active == 7 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] CALL, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1590] int currentIrpStack__Parameters__DeviceIoControl__IoControlCode = __VERIFIER_nondet_int() ; [L1591] int deviceExtension__TargetDeviceObject = __VERIFIER_nondet_int() ; [L1592] int irpSp__Control ; [L1593] int tmp ; [L1594] int tmp___0 ; [L1595] int __cil_tmp8 ; [L1596] int __cil_tmp9 ; [L1597] int __cil_tmp10 ; [L1598] int __cil_tmp11 ; [L1599] int __cil_tmp12 ; [L1603] __cil_tmp8 = 56 [L1604] __cil_tmp9 = 16384 [L1605] __cil_tmp10 = 131072 [L1606] __cil_tmp11 = 147456 [L1607] __cil_tmp12 = 147512 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1608] COND TRUE currentIrpStack__Parameters__DeviceIoControl__IoControlCode == __cil_tmp12 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1609] COND FALSE !(s != NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1614] COND FALSE !(compRegistered != 0) [L1619] compRegistered = 1 [L1620] routine = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1624] irpSp__Control = 224 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] CALL, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1899] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1900] int returnVal2 ; [L1901] int compRetStatus ; [L1902] int lcontext = __VERIFIER_nondet_int() ; [L1903] unsigned long __cil_tmp8 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1906] COND TRUE \read(compRegistered) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1907] COND TRUE routine == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] CALL, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1568] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1569] int Irp__AssociatedIrp__SystemBuffer = __VERIFIER_nondet_int() ; [L1572] COND TRUE \read(Irp__PendingReturned) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1573] COND TRUE pended == 0 [L1574] pended = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1581] COND FALSE !(myStatus >= 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1586] return (myStatus); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=-1073741637, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] RET, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, HPCdrCompletion(DeviceObject, Irp, lcontext)=-1073741637, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] compRetStatus = HPCdrCompletion(DeviceObject, Irp, lcontext) [L1919] __cil_tmp8 = (unsigned long )compRetStatus VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1920] COND FALSE !(__cil_tmp8 == -1073741802) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1927] COND FALSE !(\read(Irp__PendingReturned)) [L1930] int tmp_ndt_4; [L1931] tmp_ndt_4 = __VERIFIER_nondet_int() [L1932] COND TRUE tmp_ndt_4 == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1943] returnVal2 = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1957] COND TRUE s == NP [L1958] s = IPC [L1959] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1980] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1625] RET, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IofCallDriver(deviceExtension__TargetDeviceObject, Irp)=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] tmp = IofCallDriver(deviceExtension__TargetDeviceObject, Irp) [L1627] return (tmp); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp=0, UNLOADED=0] [L347] RET, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioHPCdrDeviceControl(DeviceObject, Irp)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] status = CdAudioHPCdrDeviceControl(DeviceObject, Irp) [L362] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0] [L1797] RET, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioDeviceControl(devobj, pirp)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] status = CdAudioDeviceControl(devobj, pirp) [L1818] COND FALSE !(\read(we_should_unload)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1824] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1825] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1832] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1833] COND FALSE !(s == MPR3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1840] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1841] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1842] COND TRUE s != SKIP2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1843] COND FALSE !(s != IPC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1856] COND FALSE !(pended != 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1868] COND TRUE status != 259 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1870] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L58] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] ----- [2018-11-23 12:44:52,926 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:44:52 BoogieIcfgContainer [2018-11-23 12:44:52,927 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 12:44:52,927 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 12:44:52,927 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 12:44:52,927 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 12:44:52,928 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:44:30" (3/4) ... [2018-11-23 12:44:52,930 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [?] ~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 0;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 0; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=276, |old(~compRegistered~0)|=265, |old(~customIrp~0)|=268, |old(~DC~0)|=261, |old(~DeviceUsageTypePaging~0)|=273, |old(~Executive~0)|=266, |old(~IPC~0)|=262, |old(~KernelMode~0)|=281, |old(~lowerDriverReturn~0)|=279, |old(~MPR1~0)|=275, |old(~MPR3~0)|=271, |old(~myStatus~0)|=278, |old(~NP~0)|=267, |old(~pended~0)|=280, |old(~pirp~0)|=272, |old(~routine~0)|=269, |old(~setEventCalled~0)|=274, |old(~SKIP1~0)|=270, |old(~SKIP2~0)|=264, |old(~Suspended~0)|=277, |old(~s~0)|=263, |old(~UNLOADED~0)|=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET #1504#return; VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] havoc ~pirp__IoStatus__Status~0;assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647;~d~0 := #t~nondet150;havoc #t~nondet150;assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647;~status~9 := #t~nondet151;havoc #t~nondet151;assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647;~irp~1 := #t~nondet152;havoc #t~nondet152;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;~we_should_unload~0 := #t~nondet153;havoc #t~nondet153;assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647;~irp_choice~0 := #t~nondet154;havoc #t~nondet154;assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647;~devobj~0 := #t~nondet155;havoc #t~nondet155;havoc ~__cil_tmp9~1;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~routine~0 := 0;~myStatus~0 := 0;~pirp~0 := 0;~Executive~0 := 0;~Suspended~0 := 5;~KernelMode~0 := 0;~DeviceUsageTypePaging~0 := 1;~pirp~0 := ~irp~1; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] CALL call _BLAST_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] ~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compFptr~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] RET #1370#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [?] assume ~status~9 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0;~pirp__IoStatus__Status~0 := 0;~myStatus~0 := 0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=0, main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~irp_choice~0;~pirp__IoStatus__Status~0 := -1073741637;~myStatus~0 := -1073741637; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call stub_driver_init(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~compFptr~0 := ~compRegistered~0;~pended~0 := ~compFptr~0; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1372#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~status~9 < 0);havoc ~tmp_ndt_1~0;assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647;~tmp_ndt_1~0 := #t~nondet156;havoc #t~nondet156; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 2 == ~tmp_ndt_1~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [|CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647;~deviceExtension__Active~1 := #t~nondet26;havoc #t~nondet26;havoc ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(2 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(1 == ~deviceExtension__Active~1); VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 7 == ~deviceExtension__Active~1; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [|CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647;~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136;havoc #t~nondet136;assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647;~deviceExtension__TargetDeviceObject~2 := #t~nondet137;havoc #t~nondet137;havoc ~irpSp__Control~0;havoc ~tmp~6;havoc ~tmp___0~3;havoc ~__cil_tmp8~0;havoc ~__cil_tmp9~0;havoc ~__cil_tmp10~2;havoc ~__cil_tmp11~2;havoc ~__cil_tmp12~1;~__cil_tmp8~0 := 56;~__cil_tmp9~0 := 16384;~__cil_tmp10~2 := 131072;~__cil_tmp11~2 := 147456;~__cil_tmp12~1 := 147512; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~s~0 != ~NP~0); VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~compRegistered~0);~compRegistered~0 := 1;~routine~0 := 0; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~irpSp__Control~0 := 224; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [|IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647;~Irp__PendingReturned~1 := #t~nondet162;havoc #t~nondet162;havoc ~returnVal2~0;havoc ~compRetStatus~0;assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647;~lcontext~0 := #t~nondet163;havoc #t~nondet163;havoc ~__cil_tmp8~1; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~compRegistered~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~routine~0; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [|HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~DeviceObject := #in~DeviceObject;~Irp := #in~Irp;~Context := #in~Context;assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647;~Irp__PendingReturned~0 := #t~nondet134;havoc #t~nondet134;assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647;~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135;havoc #t~nondet135; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 != ~Irp__PendingReturned~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~pended~0;~pended~0 := 1; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(~myStatus~0 >= 0); VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] #res := ~myStatus~0; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume true; VAL [HPCdrCompletion_~Context=0, HPCdrCompletion_~DeviceObject=0, HPCdrCompletion_~Irp=0, HPCdrCompletion_~Irp__AssociatedIrp__SystemBuffer~1=0, HPCdrCompletion_~Irp__PendingReturned~0=1, |HPCdrCompletion_#in~Context|=0, |HPCdrCompletion_#in~DeviceObject|=0, |HPCdrCompletion_#in~Irp|=0, |HPCdrCompletion_#res|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] RET #1474#return; VAL [IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#t~ret164|=(- 1073741637), |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647;~compRetStatus~0 := #t~ret164;havoc #t~ret164; VAL [IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume !(0 != ~Irp__PendingReturned~1);havoc ~tmp_ndt_4~0;assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647;~tmp_ndt_4~0 := #t~nondet166;havoc #t~nondet166; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume 0 == ~tmp_ndt_4~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] ~returnVal2~0 := 0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [?] assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~returnVal2~0; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [IofCallDriver_~__cil_tmp8~1=(- 1073741637), IofCallDriver_~compRetStatus~0=(- 1073741637), IofCallDriver_~DeviceObject=0, IofCallDriver_~Irp=0, IofCallDriver_~Irp__PendingReturned~1=0, IofCallDriver_~lcontext~0=0, IofCallDriver_~returnVal2~0=0, IofCallDriver_~tmp_ndt_4~0=0, |IofCallDriver_#in~DeviceObject|=0, |IofCallDriver_#in~Irp|=0, |IofCallDriver_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1408#return; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#t~ret138|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647;~tmp~6 := #t~ret138;havoc #t~ret138;#res := ~tmp~6; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioHPCdrDeviceControl_~__cil_tmp10~2=131072, CdAudioHPCdrDeviceControl_~__cil_tmp11~2=147456, CdAudioHPCdrDeviceControl_~__cil_tmp12~1=147512, CdAudioHPCdrDeviceControl_~__cil_tmp8~0=56, CdAudioHPCdrDeviceControl_~__cil_tmp9~0=16384, CdAudioHPCdrDeviceControl_~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, CdAudioHPCdrDeviceControl_~deviceExtension__TargetDeviceObject~2=0, CdAudioHPCdrDeviceControl_~DeviceObject=0, CdAudioHPCdrDeviceControl_~Irp=0, CdAudioHPCdrDeviceControl_~irpSp__Control~0=224, CdAudioHPCdrDeviceControl_~tmp~6=0, |CdAudioHPCdrDeviceControl_#in~DeviceObject|=0, |CdAudioHPCdrDeviceControl_#in~Irp|=0, |CdAudioHPCdrDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1500#return; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#t~ret30|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647;~status~3 := #t~ret30;havoc #t~ret30; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] #res := ~status~3; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume true; VAL [CdAudioDeviceControl_~deviceExtension__Active~1=7, CdAudioDeviceControl_~DeviceObject=0, CdAudioDeviceControl_~Irp=0, CdAudioDeviceControl_~status~3=0, |CdAudioDeviceControl_#in~DeviceObject|=0, |CdAudioDeviceControl_#in~Irp|=0, |CdAudioDeviceControl_#res|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=(- 1073741637), |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=1, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] RET #1374#return; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |main_#t~ret159|=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647;~status~9 := #t~ret159;havoc #t~ret159; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(0 != ~we_should_unload~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~NP~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 1 == ~pended~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 == ~MPR3~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~UNLOADED~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume -1 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume ~s~0 != ~SKIP2~0; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(~s~0 != ~IPC~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !(1 != ~pended~0); VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume 259 != ~status~9; VAL [main_~devobj~0=0, main_~d~0=0, main_~irp_choice~0=0, main_~irp~1=0, main_~pirp__IoStatus__Status~0=(- 1073741637), main_~status~9=0, main_~tmp_ndt_1~0=2, main_~we_should_unload~0=0, |old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call errorFn(); VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] assume !false; VAL [|old(~compFptr~0)|=0, |old(~compRegistered~0)|=0, |old(~customIrp~0)|=0, |old(~DC~0)|=0, |old(~DeviceUsageTypePaging~0)|=0, |old(~Executive~0)|=0, |old(~IPC~0)|=0, |old(~KernelMode~0)|=0, |old(~lowerDriverReturn~0)|=0, |old(~MPR1~0)|=0, |old(~MPR3~0)|=0, |old(~myStatus~0)|=0, |old(~NP~0)|=0, |old(~pended~0)|=0, |old(~pirp~0)|=0, |old(~routine~0)|=0, |old(~setEventCalled~0)|=0, |old(~SKIP1~0)|=0, |old(~SKIP2~0)|=0, |old(~Suspended~0)|=0, |old(~s~0)|=0, |old(~UNLOADED~0)|=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=(- 1073741637), ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] ensures true; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L62-L83] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756-L1823] assume ~status~9 >= 0; [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766-L1769] assume 0 == ~irp_choice~0; [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1702-L1715] ensures true; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774-L1776] assume !(~status~9 < 0); [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780-L1817] assume 2 == ~tmp_ndt_1~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316-L361] assume !(2 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319-L360] assume !(3 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322-L359] assume !(1 == ~deviceExtension__Active~1); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325-L358] assume 7 == ~deviceExtension__Active~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608-L1633] assume ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609-L1622] assume !(~s~0 != ~NP~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614-L1621] assume !(0 != ~compRegistered~0); [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] assume 0 != ~compRegistered~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907-L1917] assume 0 == ~routine~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] assume 0 != ~Irp__PendingReturned~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573-L1579] assume 0 == ~pended~0; [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581-L1585] assume !(~myStatus~0 >= 0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L19] ensures true; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920-L1924] assume !(3221225494 == ~__cil_tmp8~1 % 4294967296); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] assume !(0 != ~Irp__PendingReturned~1); [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932-L1955] assume 0 == ~tmp_ndt_4~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957-L1979] assume ~s~0 == ~NP~0; [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L23] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L20] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L12] ensures true; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] assume !(0 != ~we_should_unload~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824-L1880] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825-L1829] assume !(~s~0 == ~NP~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832-L1879] assume 1 == ~pended~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833-L1837] assume !(~s~0 == ~MPR3~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840-L1878] assume ~s~0 != ~UNLOADED~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841-L1877] assume -1 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842-L1876] assume ~s~0 != ~SKIP2~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843-L1853] assume !(~s~0 != ~IPC~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856-L1875] assume !(1 != ~pended~0); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868-L1874] assume 259 != ~status~9; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=276, ~compRegistered~0=265, ~customIrp~0=268, ~DC~0=261, ~DeviceUsageTypePaging~0=273, ~Executive~0=266, ~IPC~0=262, ~KernelMode~0=281, ~lowerDriverReturn~0=279, ~MPR1~0=275, ~MPR3~0=271, ~myStatus~0=278, ~NP~0=267, ~pended~0=280, ~pirp~0=272, ~routine~0=269, ~setEventCalled~0=274, ~SKIP1~0=270, ~SKIP2~0=264, ~Suspended~0=277, ~s~0=263, ~UNLOADED~0=260] [L31] ~s~0 := 0; [L32] ~UNLOADED~0 := 0; [L33] ~NP~0 := 0; [L34] ~DC~0 := 0; [L35] ~SKIP1~0 := 0; [L36] ~SKIP2~0 := 0; [L37] ~MPR1~0 := 0; [L38] ~MPR3~0 := 0; [L39] ~IPC~0 := 0; [L40] ~pended~0 := 0; [L41] ~compFptr~0 := 0; [L42] ~compRegistered~0 := 0; [L43] ~lowerDriverReturn~0 := 0; [L44] ~setEventCalled~0 := 0; [L45] ~customIrp~0 := 0; [L46] ~routine~0 := 0; [L47] ~myStatus~0 := 0; [L48] ~pirp~0 := 0; [L49] ~Executive~0 := 0; [L50] ~Suspended~0 := 0; [L51] ~KernelMode~0 := 0; [L52] ~DeviceUsageTypePaging~0 := 0; VAL [old(~compFptr~0)=276, old(~compRegistered~0)=265, old(~customIrp~0)=268, old(~DC~0)=261, old(~DeviceUsageTypePaging~0)=273, old(~Executive~0)=266, old(~IPC~0)=262, old(~KernelMode~0)=281, old(~lowerDriverReturn~0)=279, old(~MPR1~0)=275, old(~MPR3~0)=271, old(~myStatus~0)=278, old(~NP~0)=267, old(~pended~0)=280, old(~pirp~0)=272, old(~routine~0)=269, old(~setEventCalled~0)=274, old(~SKIP1~0)=270, old(~SKIP2~0)=264, old(~Suspended~0)=277, old(~s~0)=263, old(~UNLOADED~0)=260, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] RET call ULTIMATE.init(); VAL [~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [?] CALL call #t~ret176 := main(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=0, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=0, ~s~0=0, ~UNLOADED~0=0] [L1717] havoc ~pirp__IoStatus__Status~0; [L1718] assume -2147483648 <= #t~nondet150 && #t~nondet150 <= 2147483647; [L1718] ~d~0 := #t~nondet150; [L1718] havoc #t~nondet150; [L1719] assume -2147483648 <= #t~nondet151 && #t~nondet151 <= 2147483647; [L1719] ~status~9 := #t~nondet151; [L1719] havoc #t~nondet151; [L1720] assume -2147483648 <= #t~nondet152 && #t~nondet152 <= 2147483647; [L1720] ~irp~1 := #t~nondet152; [L1720] havoc #t~nondet152; [L1721] assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647; [L1721] ~we_should_unload~0 := #t~nondet153; [L1721] havoc #t~nondet153; [L1722] assume -2147483648 <= #t~nondet154 && #t~nondet154 <= 2147483647; [L1722] ~irp_choice~0 := #t~nondet154; [L1722] havoc #t~nondet154; [L1723] assume -2147483648 <= #t~nondet155 && #t~nondet155 <= 2147483647; [L1723] ~devobj~0 := #t~nondet155; [L1723] havoc #t~nondet155; [L1724] havoc ~__cil_tmp9~1; [L1729] ~s~0 := 0; [L1730] ~UNLOADED~0 := 0; [L1731] ~NP~0 := 0; [L1732] ~DC~0 := 0; [L1733] ~SKIP1~0 := 0; [L1734] ~SKIP2~0 := 0; [L1735] ~MPR1~0 := 0; [L1736] ~MPR3~0 := 0; [L1737] ~IPC~0 := 0; [L1738] ~pended~0 := 0; [L1739] ~compFptr~0 := 0; [L1740] ~compRegistered~0 := 0; [L1741] ~lowerDriverReturn~0 := 0; [L1742] ~setEventCalled~0 := 0; [L1743] ~customIrp~0 := 0; [L1744] ~routine~0 := 0; [L1745] ~myStatus~0 := 0; [L1746] ~pirp~0 := 0; [L1747] ~Executive~0 := 0; [L1748] ~Suspended~0 := 5; [L1749] ~KernelMode~0 := 0; [L1750] ~DeviceUsageTypePaging~0 := 1; [L1753] ~pirp~0 := ~irp~1; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=0, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1754] CALL call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=0, ~MPR3~0=0, ~myStatus~0=0, ~NP~0=0, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=0, ~SKIP2~0=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L66] ~UNLOADED~0 := 0; [L67] ~NP~0 := 1; [L68] ~DC~0 := 2; [L69] ~SKIP1~0 := 3; [L70] ~SKIP2~0 := 4; [L71] ~MPR1~0 := 5; [L72] ~MPR3~0 := 6; [L73] ~IPC~0 := 7; [L74] ~s~0 := ~UNLOADED~0; [L75] ~pended~0 := 0; [L76] ~compFptr~0 := 0; [L77] ~compRegistered~0 := 0; [L78] ~lowerDriverReturn~0 := 0; [L79] ~setEventCalled~0 := 0; [L80] ~customIrp~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0] [L1754] RET call _BLAST_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=0, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1756] COND TRUE ~status~9 >= 0 [L1757] ~s~0 := ~NP~0; [L1758] ~customIrp~0 := 0; [L1759] ~setEventCalled~0 := ~customIrp~0; [L1760] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1761] ~compRegistered~0 := ~lowerDriverReturn~0; [L1762] ~compFptr~0 := ~compRegistered~0; [L1763] ~pended~0 := ~compFptr~0; [L1764] ~pirp__IoStatus__Status~0 := 0; [L1765] ~myStatus~0 := 0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=0, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1766] COND TRUE 0 == ~irp_choice~0 [L1767] ~pirp__IoStatus__Status~0 := -1073741637; [L1768] ~myStatus~0 := -1073741637; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1771] CALL call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1706] ~s~0 := ~NP~0; [L1707] ~customIrp~0 := 0; [L1708] ~setEventCalled~0 := ~customIrp~0; [L1709] ~lowerDriverReturn~0 := ~setEventCalled~0; [L1710] ~compRegistered~0 := ~lowerDriverReturn~0; [L1711] ~compFptr~0 := ~compRegistered~0; [L1712] ~pended~0 := ~compFptr~0; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1771] RET call stub_driver_init(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1774] COND FALSE !(~status~9 < 0) [L1778] havoc ~tmp_ndt_1~0; [L1779] assume -2147483648 <= #t~nondet156 && #t~nondet156 <= 2147483647; [L1779] ~tmp_ndt_1~0 := #t~nondet156; [L1779] havoc #t~nondet156; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1780] COND TRUE 2 == ~tmp_ndt_1~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] CALL call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L311-L364] ~DeviceObject := #in~DeviceObject; [L311-L364] ~Irp := #in~Irp; [L312] assume -2147483648 <= #t~nondet26 && #t~nondet26 <= 2147483647; [L312] ~deviceExtension__Active~1 := #t~nondet26; [L312] havoc #t~nondet26; [L313] havoc ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L316] COND FALSE !(2 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L319] COND FALSE !(3 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L322] COND FALSE !(1 == ~deviceExtension__Active~1) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L325] COND TRUE 7 == ~deviceExtension__Active~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L347] CALL call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=0, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1589-L1637] ~DeviceObject := #in~DeviceObject; [L1589-L1637] ~Irp := #in~Irp; [L1590] assume -2147483648 <= #t~nondet136 && #t~nondet136 <= 2147483647; [L1590] ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 := #t~nondet136; [L1590] havoc #t~nondet136; [L1591] assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647; [L1591] ~deviceExtension__TargetDeviceObject~2 := #t~nondet137; [L1591] havoc #t~nondet137; [L1592] havoc ~irpSp__Control~0; [L1593] havoc ~tmp~6; [L1594] havoc ~tmp___0~3; [L1595] havoc ~__cil_tmp8~0; [L1596] havoc ~__cil_tmp9~0; [L1597] havoc ~__cil_tmp10~2; [L1598] havoc ~__cil_tmp11~2; [L1599] havoc ~__cil_tmp12~1; [L1603] ~__cil_tmp8~0 := 56; [L1604] ~__cil_tmp9~0 := 16384; [L1605] ~__cil_tmp10~2 := 131072; [L1606] ~__cil_tmp11~2 := 147456; [L1607] ~__cil_tmp12~1 := 147512; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1608] COND TRUE ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3 == ~__cil_tmp12~1 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1609] COND FALSE !(~s~0 != ~NP~0) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=0, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1614] COND FALSE !(0 != ~compRegistered~0) [L1619] ~compRegistered~0 := 1; [L1620] ~routine~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1624] ~irpSp__Control~0 := 224; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1625] CALL call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1898-L1982] ~DeviceObject := #in~DeviceObject; [L1898-L1982] ~Irp := #in~Irp; [L1899] assume -2147483648 <= #t~nondet162 && #t~nondet162 <= 2147483647; [L1899] ~Irp__PendingReturned~1 := #t~nondet162; [L1899] havoc #t~nondet162; [L1900] havoc ~returnVal2~0; [L1901] havoc ~compRetStatus~0; [L1902] assume -2147483648 <= #t~nondet163 && #t~nondet163 <= 2147483647; [L1902] ~lcontext~0 := #t~nondet163; [L1902] havoc #t~nondet163; [L1903] havoc ~__cil_tmp8~1; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1906-L1926] COND TRUE 0 != ~compRegistered~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1907] COND TRUE 0 == ~routine~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] CALL call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1567-L1588] ~DeviceObject := #in~DeviceObject; [L1567-L1588] ~Irp := #in~Irp; [L1567-L1588] ~Context := #in~Context; [L1568] assume -2147483648 <= #t~nondet134 && #t~nondet134 <= 2147483647; [L1568] ~Irp__PendingReturned~0 := #t~nondet134; [L1568] havoc #t~nondet134; [L1569] assume -2147483648 <= #t~nondet135 && #t~nondet135 <= 2147483647; [L1569] ~Irp__AssociatedIrp__SystemBuffer~1 := #t~nondet135; [L1569] havoc #t~nondet135; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1572-L1580] COND TRUE 0 != ~Irp__PendingReturned~0 VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=0, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1573] COND TRUE 0 == ~pended~0 [L1574] ~pended~0 := 1; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1581] COND FALSE !(~myStatus~0 >= 0) VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1586] #res := ~myStatus~0; VAL [#in~Context=0, #in~DeviceObject=0, #in~Irp=0, #res=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~Context=0, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__AssociatedIrp__SystemBuffer~1=0, ~Irp__PendingReturned~0=1, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] RET call #t~ret164 := HPCdrCompletion(~DeviceObject, ~Irp, ~lcontext~0); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret164=-1073741637, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1909] assume -2147483648 <= #t~ret164 && #t~ret164 <= 2147483647; [L1909] ~compRetStatus~0 := #t~ret164; [L1909] havoc #t~ret164; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1919] ~__cil_tmp8~1 := ~compRetStatus~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1920] COND FALSE !(3221225494 == ~__cil_tmp8~1 % 4294967296) VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~UNLOADED~0=0] [L1927-L1956] COND FALSE !(0 != ~Irp__PendingReturned~1) [L1930] havoc ~tmp_ndt_4~0; [L1931] assume -2147483648 <= #t~nondet166 && #t~nondet166 <= 2147483647; [L1931] ~tmp_ndt_4~0 := #t~nondet166; [L1931] havoc #t~nondet166; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1932] COND TRUE 0 == ~tmp_ndt_4~0 VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1943] ~returnVal2~0 := 0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=1, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1957] COND TRUE ~s~0 == ~NP~0 [L1958] ~s~0 := ~IPC~0; [L1959] ~lowerDriverReturn~0 := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1980] #res := ~returnVal2~0; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp8~1=-1073741637, ~compFptr~0=0, ~compRegistered~0=1, ~compRetStatus~0=-1073741637, ~customIrp~0=0, ~DC~0=2, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~Irp__PendingReturned~1=0, ~KernelMode~0=0, ~lcontext~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~returnVal2~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_4~0=0, ~UNLOADED~0=0] [L1625] RET call #t~ret138 := IofCallDriver(~deviceExtension__TargetDeviceObject~2, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret138=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1625] assume -2147483648 <= #t~ret138 && #t~ret138 <= 2147483647; [L1625] ~tmp~6 := #t~ret138; [L1625] havoc #t~ret138; [L1627] #res := ~tmp~6; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~__cil_tmp10~2=131072, ~__cil_tmp11~2=147456, ~__cil_tmp12~1=147512, ~__cil_tmp8~0=56, ~__cil_tmp9~0=16384, ~compFptr~0=0, ~compRegistered~0=1, ~currentIrpStack__Parameters__DeviceIoControl__IoControlCode~3=147512, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__TargetDeviceObject~2=0, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~irpSp__Control~0=224, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~tmp~6=0, ~UNLOADED~0=0] [L347] RET call #t~ret30 := CdAudioHPCdrDeviceControl(~DeviceObject, ~Irp); VAL [#in~DeviceObject=0, #in~Irp=0, #t~ret30=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L347] assume -2147483648 <= #t~ret30 && #t~ret30 <= 2147483647; [L347] ~status~3 := #t~ret30; [L347] havoc #t~ret30; VAL [#in~DeviceObject=0, #in~Irp=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L362] #res := ~status~3; VAL [#in~DeviceObject=0, #in~Irp=0, #res=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=-1073741637, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=1, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~deviceExtension__Active~1=7, ~DeviceObject=0, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~Irp=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~3=0, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L1797] RET call #t~ret159 := CdAudioDeviceControl(~devobj~0, ~pirp~0); VAL [#t~ret159=0, old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1797] assume -2147483648 <= #t~ret159 && #t~ret159 <= 2147483647; [L1797] ~status~9 := #t~ret159; [L1797] havoc #t~ret159; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1818-L1822] COND FALSE !(0 != ~we_should_unload~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1824] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1825] COND FALSE !(~s~0 == ~NP~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1832] COND TRUE 1 == ~pended~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1833] COND FALSE !(~s~0 == ~MPR3~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1840] COND TRUE ~s~0 != ~UNLOADED~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1841] COND TRUE -1 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1842] COND TRUE ~s~0 != ~SKIP2~0 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1843] COND FALSE !(~s~0 != ~IPC~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1856] COND FALSE !(1 != ~pended~0) VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1868] COND TRUE 259 != ~status~9 VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~devobj~0=0, ~d~0=0, ~Executive~0=0, ~IPC~0=7, ~irp_choice~0=0, ~irp~1=0, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp__IoStatus__Status~0=-1073741637, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~status~9=0, ~Suspended~0=5, ~s~0=7, ~tmp_ndt_1~0=2, ~UNLOADED~0=0, ~we_should_unload~0=0] [L1870] CALL call errorFn(); VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L58] assert false; VAL [old(~compFptr~0)=0, old(~compRegistered~0)=0, old(~customIrp~0)=0, old(~DC~0)=0, old(~DeviceUsageTypePaging~0)=0, old(~Executive~0)=0, old(~IPC~0)=0, old(~KernelMode~0)=0, old(~lowerDriverReturn~0)=0, old(~MPR1~0)=0, old(~MPR3~0)=0, old(~myStatus~0)=0, old(~NP~0)=0, old(~pended~0)=0, old(~pirp~0)=0, old(~routine~0)=0, old(~setEventCalled~0)=0, old(~SKIP1~0)=0, old(~SKIP2~0)=0, old(~Suspended~0)=0, old(~s~0)=0, old(~UNLOADED~0)=0, ~compFptr~0=0, ~compRegistered~0=1, ~customIrp~0=0, ~DC~0=2, ~DeviceUsageTypePaging~0=1, ~Executive~0=0, ~IPC~0=7, ~KernelMode~0=0, ~lowerDriverReturn~0=0, ~MPR1~0=5, ~MPR3~0=6, ~myStatus~0=-1073741637, ~NP~0=1, ~pended~0=1, ~pirp~0=0, ~routine~0=0, ~setEventCalled~0=0, ~SKIP1~0=3, ~SKIP2~0=4, ~Suspended~0=5, ~s~0=7, ~UNLOADED~0=0] [L31] int s ; [L32] int UNLOADED ; [L33] int NP ; [L34] int DC ; [L35] int SKIP1 ; [L36] int SKIP2 ; [L37] int MPR1 ; [L38] int MPR3 ; [L39] int IPC ; [L40] int pended ; [L41] int compFptr ; [L42] int compRegistered ; [L43] int lowerDriverReturn ; [L44] int setEventCalled ; [L45] int customIrp ; [L46] int routine ; [L47] int myStatus ; [L48] int pirp ; [L49] int Executive ; [L50] int Suspended ; [L51] int KernelMode ; [L52] int DeviceUsageTypePaging ; VAL [\old(compFptr)=276, \old(compRegistered)=265, \old(customIrp)=268, \old(DC)=261, \old(DeviceUsageTypePaging)=273, \old(Executive)=266, \old(IPC)=262, \old(KernelMode)=281, \old(lowerDriverReturn)=279, \old(MPR1)=275, \old(MPR3)=271, \old(myStatus)=278, \old(NP)=267, \old(pended)=280, \old(pirp)=272, \old(routine)=269, \old(s)=263, \old(setEventCalled)=274, \old(SKIP1)=270, \old(SKIP2)=264, \old(Suspended)=277, \old(UNLOADED)=260, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=0, UNLOADED=0] [L1717] int pirp__IoStatus__Status ; [L1718] int d = __VERIFIER_nondet_int() ; [L1719] int status = __VERIFIER_nondet_int() ; [L1720] int irp = __VERIFIER_nondet_int() ; [L1721] int we_should_unload = __VERIFIER_nondet_int() ; [L1722] int irp_choice = __VERIFIER_nondet_int() ; [L1723] int devobj = __VERIFIER_nondet_int() ; [L1724] int __cil_tmp9 ; [L1729] s = 0 [L1730] UNLOADED = 0 [L1731] NP = 0 [L1732] DC = 0 [L1733] SKIP1 = 0 [L1734] SKIP2 = 0 [L1735] MPR1 = 0 [L1736] MPR3 = 0 [L1737] IPC = 0 [L1738] pended = 0 [L1739] compFptr = 0 [L1740] compRegistered = 0 [L1741] lowerDriverReturn = 0 [L1742] setEventCalled = 0 [L1743] customIrp = 0 [L1744] routine = 0 [L1745] myStatus = 0 [L1746] pirp = 0 [L1747] Executive = 0 [L1748] Suspended = 5 [L1749] KernelMode = 0 [L1750] DeviceUsageTypePaging = 1 [L1753] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=0, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1754] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=5, UNLOADED=0] [L66] UNLOADED = 0 [L67] NP = 1 [L68] DC = 2 [L69] SKIP1 = 3 [L70] SKIP2 = 4 [L71] MPR1 = 5 [L72] MPR3 = 6 [L73] IPC = 7 [L74] s = UNLOADED [L75] pended = 0 [L76] compFptr = 0 [L77] compRegistered = 0 [L78] lowerDriverReturn = 0 [L79] setEventCalled = 0 [L80] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1754] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1756] COND TRUE status >= 0 [L1757] s = NP [L1758] customIrp = 0 [L1759] setEventCalled = customIrp [L1760] lowerDriverReturn = setEventCalled [L1761] compRegistered = lowerDriverReturn [L1762] compFptr = compRegistered [L1763] pended = compFptr [L1764] pirp__IoStatus__Status = 0 [L1765] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1766] COND TRUE irp_choice == 0 [L1767] pirp__IoStatus__Status = -1073741637 [L1768] myStatus = -1073741637 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1771] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1706] s = NP [L1707] customIrp = 0 [L1708] setEventCalled = customIrp [L1709] lowerDriverReturn = setEventCalled [L1710] compRegistered = lowerDriverReturn [L1711] compFptr = compRegistered [L1712] pended = compFptr VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1771] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1774] COND FALSE !(status < 0) [L1778] int tmp_ndt_1; [L1779] tmp_ndt_1 = __VERIFIER_nondet_int() [L1780] COND TRUE tmp_ndt_1 == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] CALL, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L312] int deviceExtension__Active = __VERIFIER_nondet_int() ; [L313] int status ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L316] COND FALSE !(deviceExtension__Active == 2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L319] COND FALSE !(deviceExtension__Active == 3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L322] COND FALSE !(deviceExtension__Active == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L325] COND TRUE deviceExtension__Active == 7 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] CALL, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1590] int currentIrpStack__Parameters__DeviceIoControl__IoControlCode = __VERIFIER_nondet_int() ; [L1591] int deviceExtension__TargetDeviceObject = __VERIFIER_nondet_int() ; [L1592] int irpSp__Control ; [L1593] int tmp ; [L1594] int tmp___0 ; [L1595] int __cil_tmp8 ; [L1596] int __cil_tmp9 ; [L1597] int __cil_tmp10 ; [L1598] int __cil_tmp11 ; [L1599] int __cil_tmp12 ; [L1603] __cil_tmp8 = 56 [L1604] __cil_tmp9 = 16384 [L1605] __cil_tmp10 = 131072 [L1606] __cil_tmp11 = 147456 [L1607] __cil_tmp12 = 147512 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1608] COND TRUE currentIrpStack__Parameters__DeviceIoControl__IoControlCode == __cil_tmp12 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1609] COND FALSE !(s != NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1614] COND FALSE !(compRegistered != 0) [L1619] compRegistered = 1 [L1620] routine = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1624] irpSp__Control = 224 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] CALL, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1899] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1900] int returnVal2 ; [L1901] int compRetStatus ; [L1902] int lcontext = __VERIFIER_nondet_int() ; [L1903] unsigned long __cil_tmp8 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1906] COND TRUE \read(compRegistered) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1907] COND TRUE routine == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] CALL, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1568] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1569] int Irp__AssociatedIrp__SystemBuffer = __VERIFIER_nondet_int() ; [L1572] COND TRUE \read(Irp__PendingReturned) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1573] COND TRUE pended == 0 [L1574] pended = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1581] COND FALSE !(myStatus >= 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1586] return (myStatus); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=-1073741637, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] RET, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, HPCdrCompletion(DeviceObject, Irp, lcontext)=-1073741637, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] compRetStatus = HPCdrCompletion(DeviceObject, Irp, lcontext) [L1919] __cil_tmp8 = (unsigned long )compRetStatus VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1920] COND FALSE !(__cil_tmp8 == -1073741802) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1927] COND FALSE !(\read(Irp__PendingReturned)) [L1930] int tmp_ndt_4; [L1931] tmp_ndt_4 = __VERIFIER_nondet_int() [L1932] COND TRUE tmp_ndt_4 == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1943] returnVal2 = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1957] COND TRUE s == NP [L1958] s = IPC [L1959] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1980] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1625] RET, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IofCallDriver(deviceExtension__TargetDeviceObject, Irp)=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] tmp = IofCallDriver(deviceExtension__TargetDeviceObject, Irp) [L1627] return (tmp); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp=0, UNLOADED=0] [L347] RET, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioHPCdrDeviceControl(DeviceObject, Irp)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] status = CdAudioHPCdrDeviceControl(DeviceObject, Irp) [L362] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0] [L1797] RET, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioDeviceControl(devobj, pirp)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] status = CdAudioDeviceControl(devobj, pirp) [L1818] COND FALSE !(\read(we_should_unload)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1824] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1825] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1832] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1833] COND FALSE !(s == MPR3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1840] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1841] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1842] COND TRUE s != SKIP2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1843] COND FALSE !(s != IPC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1856] COND FALSE !(pended != 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1868] COND TRUE status != 259 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1870] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L58] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] ----- [2018-11-23 12:44:56,297 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_2606c9a0-65be-4fa6-925f-22d1d9cd1ee9/bin-2019/utaipan/witness.graphml [2018-11-23 12:44:56,297 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 12:44:56,298 INFO L168 Benchmark]: Toolchain (without parser) took 27344.14 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 790.6 MB). Free memory was 956.6 MB in the beginning and 1.3 GB in the end (delta: -386.0 MB). Peak memory consumption was 404.6 MB. Max. memory is 11.5 GB. [2018-11-23 12:44:56,299 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 12:44:56,299 INFO L168 Benchmark]: CACSL2BoogieTranslator took 455.77 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 165.7 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -188.1 MB). Peak memory consumption was 50.1 MB. Max. memory is 11.5 GB. [2018-11-23 12:44:56,299 INFO L168 Benchmark]: Boogie Procedure Inliner took 27.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. [2018-11-23 12:44:56,299 INFO L168 Benchmark]: Boogie Preprocessor took 59.61 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2018-11-23 12:44:56,299 INFO L168 Benchmark]: RCFGBuilder took 1057.09 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 992.4 MB in the end (delta: 142.5 MB). Peak memory consumption was 142.5 MB. Max. memory is 11.5 GB. [2018-11-23 12:44:56,300 INFO L168 Benchmark]: TraceAbstraction took 22370.72 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 625.0 MB). Free memory was 992.4 MB in the beginning and 1.4 GB in the end (delta: -434.2 MB). Peak memory consumption was 190.7 MB. Max. memory is 11.5 GB. [2018-11-23 12:44:56,300 INFO L168 Benchmark]: Witness Printer took 3370.04 ms. Allocated memory is still 1.8 GB. Free memory was 1.4 GB in the beginning and 1.3 GB in the end (delta: 84.1 MB). Peak memory consumption was 84.1 MB. Max. memory is 11.5 GB. [2018-11-23 12:44:56,301 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 455.77 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 165.7 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -188.1 MB). Peak memory consumption was 50.1 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 27.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 59.61 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1057.09 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 992.4 MB in the end (delta: 142.5 MB). Peak memory consumption was 142.5 MB. Max. memory is 11.5 GB. * TraceAbstraction took 22370.72 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 625.0 MB). Free memory was 992.4 MB in the beginning and 1.4 GB in the end (delta: -434.2 MB). Peak memory consumption was 190.7 MB. Max. memory is 11.5 GB. * Witness Printer took 3370.04 ms. Allocated memory is still 1.8 GB. Free memory was 1.4 GB in the beginning and 1.3 GB in the end (delta: 84.1 MB). Peak memory consumption was 84.1 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 58]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L31] int s ; [L32] int UNLOADED ; [L33] int NP ; [L34] int DC ; [L35] int SKIP1 ; [L36] int SKIP2 ; [L37] int MPR1 ; [L38] int MPR3 ; [L39] int IPC ; [L40] int pended ; [L41] int compFptr ; [L42] int compRegistered ; [L43] int lowerDriverReturn ; [L44] int setEventCalled ; [L45] int customIrp ; [L46] int routine ; [L47] int myStatus ; [L48] int pirp ; [L49] int Executive ; [L50] int Suspended ; [L51] int KernelMode ; [L52] int DeviceUsageTypePaging ; VAL [\old(compFptr)=276, \old(compRegistered)=265, \old(customIrp)=268, \old(DC)=261, \old(DeviceUsageTypePaging)=273, \old(Executive)=266, \old(IPC)=262, \old(KernelMode)=281, \old(lowerDriverReturn)=279, \old(MPR1)=275, \old(MPR3)=271, \old(myStatus)=278, \old(NP)=267, \old(pended)=280, \old(pirp)=272, \old(routine)=269, \old(s)=263, \old(setEventCalled)=274, \old(SKIP1)=270, \old(SKIP2)=264, \old(Suspended)=277, \old(UNLOADED)=260, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=0, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=0, UNLOADED=0] [L1717] int pirp__IoStatus__Status ; [L1718] int d = __VERIFIER_nondet_int() ; [L1719] int status = __VERIFIER_nondet_int() ; [L1720] int irp = __VERIFIER_nondet_int() ; [L1721] int we_should_unload = __VERIFIER_nondet_int() ; [L1722] int irp_choice = __VERIFIER_nondet_int() ; [L1723] int devobj = __VERIFIER_nondet_int() ; [L1724] int __cil_tmp9 ; [L1729] s = 0 [L1730] UNLOADED = 0 [L1731] NP = 0 [L1732] DC = 0 [L1733] SKIP1 = 0 [L1734] SKIP2 = 0 [L1735] MPR1 = 0 [L1736] MPR3 = 0 [L1737] IPC = 0 [L1738] pended = 0 [L1739] compFptr = 0 [L1740] compRegistered = 0 [L1741] lowerDriverReturn = 0 [L1742] setEventCalled = 0 [L1743] customIrp = 0 [L1744] routine = 0 [L1745] myStatus = 0 [L1746] pirp = 0 [L1747] Executive = 0 [L1748] Suspended = 5 [L1749] KernelMode = 0 [L1750] DeviceUsageTypePaging = 1 [L1753] pirp = irp VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=0, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=0, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1754] CALL _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=0, DeviceUsageTypePaging=1, Executive=0, IPC=0, KernelMode=0, lowerDriverReturn=0, MPR1=0, MPR3=0, myStatus=0, NP=0, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=0, SKIP2=0, Suspended=5, UNLOADED=0] [L66] UNLOADED = 0 [L67] NP = 1 [L68] DC = 2 [L69] SKIP1 = 3 [L70] SKIP2 = 4 [L71] MPR1 = 5 [L72] MPR3 = 6 [L73] IPC = 7 [L74] s = UNLOADED [L75] pended = 0 [L76] compFptr = 0 [L77] compRegistered = 0 [L78] lowerDriverReturn = 0 [L79] setEventCalled = 0 [L80] customIrp = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1754] RET _BLAST_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, routine=0, s=0, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1756] COND TRUE status >= 0 [L1757] s = NP [L1758] customIrp = 0 [L1759] setEventCalled = customIrp [L1760] lowerDriverReturn = setEventCalled [L1761] compRegistered = lowerDriverReturn [L1762] compFptr = compRegistered [L1763] pended = compFptr [L1764] pirp__IoStatus__Status = 0 [L1765] myStatus = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=0, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1766] COND TRUE irp_choice == 0 [L1767] pirp__IoStatus__Status = -1073741637 [L1768] myStatus = -1073741637 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1771] CALL stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1706] s = NP [L1707] customIrp = 0 [L1708] setEventCalled = customIrp [L1709] lowerDriverReturn = setEventCalled [L1710] compRegistered = lowerDriverReturn [L1711] compFptr = compRegistered [L1712] pended = compFptr VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1771] RET stub_driver_init() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0, we_should_unload=0] [L1774] COND FALSE !(status < 0) [L1778] int tmp_ndt_1; [L1779] tmp_ndt_1 = __VERIFIER_nondet_int() [L1780] COND TRUE tmp_ndt_1 == 2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] CALL, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L312] int deviceExtension__Active = __VERIFIER_nondet_int() ; [L313] int status ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L316] COND FALSE !(deviceExtension__Active == 2) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L319] COND FALSE !(deviceExtension__Active == 3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L322] COND FALSE !(deviceExtension__Active == 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L325] COND TRUE deviceExtension__Active == 7 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] CALL, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=0, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1590] int currentIrpStack__Parameters__DeviceIoControl__IoControlCode = __VERIFIER_nondet_int() ; [L1591] int deviceExtension__TargetDeviceObject = __VERIFIER_nondet_int() ; [L1592] int irpSp__Control ; [L1593] int tmp ; [L1594] int tmp___0 ; [L1595] int __cil_tmp8 ; [L1596] int __cil_tmp9 ; [L1597] int __cil_tmp10 ; [L1598] int __cil_tmp11 ; [L1599] int __cil_tmp12 ; [L1603] __cil_tmp8 = 56 [L1604] __cil_tmp9 = 16384 [L1605] __cil_tmp10 = 131072 [L1606] __cil_tmp11 = 147456 [L1607] __cil_tmp12 = 147512 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1608] COND TRUE currentIrpStack__Parameters__DeviceIoControl__IoControlCode == __cil_tmp12 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1609] COND FALSE !(s != NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=0, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1614] COND FALSE !(compRegistered != 0) [L1619] compRegistered = 1 [L1620] routine = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1624] irpSp__Control = 224 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] CALL, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1899] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1900] int returnVal2 ; [L1901] int compRetStatus ; [L1902] int lcontext = __VERIFIER_nondet_int() ; [L1903] unsigned long __cil_tmp8 ; VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1906] COND TRUE \read(compRegistered) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1907] COND TRUE routine == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] CALL, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1568] int Irp__PendingReturned = __VERIFIER_nondet_int() ; [L1569] int Irp__AssociatedIrp__SystemBuffer = __VERIFIER_nondet_int() ; [L1572] COND TRUE \read(Irp__PendingReturned) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=0, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1573] COND TRUE pended == 0 [L1574] pended = 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1581] COND FALSE !(myStatus >= 0) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1586] return (myStatus); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(Context)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=-1073741637, compFptr=0, compRegistered=1, Context=0, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__AssociatedIrp__SystemBuffer=0, Irp__PendingReturned=1, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] RET, EXPR HPCdrCompletion(DeviceObject, Irp, lcontext) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, HPCdrCompletion(DeviceObject, Irp, lcontext)=-1073741637, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1909] compRetStatus = HPCdrCompletion(DeviceObject, Irp, lcontext) [L1919] __cil_tmp8 = (unsigned long )compRetStatus VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1920] COND FALSE !(__cil_tmp8 == -1073741802) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1927] COND FALSE !(\read(Irp__PendingReturned)) [L1930] int tmp_ndt_4; [L1931] tmp_ndt_4 = __VERIFIER_nondet_int() [L1932] COND TRUE tmp_ndt_4 == 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1943] returnVal2 = 0 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=1, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1957] COND TRUE s == NP [L1958] s = IPC [L1959] lowerDriverReturn = returnVal2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1980] return (returnVal2); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp8=3221225659, compFptr=0, compRegistered=1, compRetStatus=-1073741637, customIrp=0, DC=2, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, Irp__PendingReturned=0, KernelMode=0, lcontext=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, returnVal2=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp_ndt_4=0, UNLOADED=0] [L1625] RET, EXPR IofCallDriver(deviceExtension__TargetDeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IofCallDriver(deviceExtension__TargetDeviceObject, Irp)=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L1625] tmp = IofCallDriver(deviceExtension__TargetDeviceObject, Irp) [L1627] return (tmp); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, __cil_tmp10=131072, __cil_tmp11=147456, __cil_tmp12=147512, __cil_tmp8=56, __cil_tmp9=16384, compFptr=0, compRegistered=1, currentIrpStack__Parameters__DeviceIoControl__IoControlCode=147512, customIrp=0, DC=2, deviceExtension__TargetDeviceObject=0, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, irpSp__Control=224, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, tmp=0, UNLOADED=0] [L347] RET, EXPR CdAudioHPCdrDeviceControl(DeviceObject, Irp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioHPCdrDeviceControl(DeviceObject, Irp)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L347] status = CdAudioHPCdrDeviceControl(DeviceObject, Irp) [L362] return (status); VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceObject)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(Irp)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=-1073741637, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=1, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, \result=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, deviceExtension__Active=7, DeviceObject=0, DeviceUsageTypePaging=1, Executive=0, IPC=7, Irp=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, UNLOADED=0] [L1797] RET, EXPR CdAudioDeviceControl(devobj, pirp) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, CdAudioDeviceControl(devobj, pirp)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1797] status = CdAudioDeviceControl(devobj, pirp) [L1818] COND FALSE !(\read(we_should_unload)) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1824] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1825] COND FALSE !(s == NP) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1832] COND TRUE pended == 1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1833] COND FALSE !(s == MPR3) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1840] COND TRUE s != UNLOADED VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1841] COND TRUE status != -1 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1842] COND TRUE s != SKIP2 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1843] COND FALSE !(s != IPC) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1856] COND FALSE !(pended != 1) VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1868] COND TRUE status != 259 VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, d=0, DC=2, DeviceUsageTypePaging=1, devobj=0, Executive=0, IPC=7, irp=0, irp_choice=0, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, pirp__IoStatus__Status=-1073741637, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, status=0, Suspended=5, tmp_ndt_1=2, UNLOADED=0, we_should_unload=0] [L1870] CALL errorFn() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] [L58] __VERIFIER_error() VAL [\old(compFptr)=0, \old(compRegistered)=0, \old(customIrp)=0, \old(DC)=0, \old(DeviceUsageTypePaging)=0, \old(Executive)=0, \old(IPC)=0, \old(KernelMode)=0, \old(lowerDriverReturn)=0, \old(MPR1)=0, \old(MPR3)=0, \old(myStatus)=0, \old(NP)=0, \old(pended)=0, \old(pirp)=0, \old(routine)=0, \old(s)=0, \old(setEventCalled)=0, \old(SKIP1)=0, \old(SKIP2)=0, \old(Suspended)=0, \old(UNLOADED)=0, compFptr=0, compRegistered=1, customIrp=0, DC=2, DeviceUsageTypePaging=1, Executive=0, IPC=7, KernelMode=0, lowerDriverReturn=0, MPR1=5, MPR3=6, myStatus=-1073741637, NP=1, pended=1, pirp=0, routine=0, s=7, setEventCalled=0, SKIP1=3, SKIP2=4, Suspended=5, UNLOADED=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 30 procedures, 536 locations, 1 error locations. UNSAFE Result, 22.3s OverallTime, 67 OverallIterations, 2 TraceHistogramMax, 12.9s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 38639 SDtfs, 15949 SDslu, 167590 SDs, 0 SdLazy, 13476 SolverSat, 2547 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 7.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 636 GetRequests, 147 SyntacticMatches, 6 SemanticMatches, 483 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 185 ImplicationChecksByTransitivity, 3.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=994occurred in iteration=65, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 2.4s AutomataMinimizationTime, 66 MinimizatonAttempts, 1887 StatesRemovedByMinimization, 41 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.9s InterpolantComputationTime, 3973 NumberOfCodeBlocks, 3973 NumberOfCodeBlocksAsserted, 67 NumberOfCheckSat, 3834 ConstructedInterpolants, 0 QuantifiedInterpolants, 503694 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 66 InterpolantComputations, 66 PerfectInterpolantSequences, 4/4 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...