diff --git a/librz/analysis/arch/x86/x86_il.c b/librz/analysis/arch/x86/x86_il.c index e0bef5be22f..a00a7ff4f53 100644 --- a/librz/analysis/arch/x86/x86_il.c +++ b/librz/analysis/arch/x86/x86_il.c @@ -374,6 +374,14 @@ static const char *x86_bound_regs_64[] = { "rbp", /* X86_REG_RBP */ "rsi", /* X86_REG_RSI */ "rdi", /* X86_REG_RDI */ + "r8", /* X86_REG_R8 */ + "r9", /* X86_REG_R9 */ + "r10", /* X86_REG_R10 */ + "r11", /* X86_REG_R11 */ + "r12", /* X86_REG_R12 */ + "r13", /* X86_REG_R13 */ + "r14", /* X86_REG_R14 */ + "r15", /* X86_REG_R15 */ "nt", /* X86_EFLAGS_NT */ "rf", /* X86_EFLAGS_RF */ "vm", /* X86_EFLAGS_VM */ @@ -493,6 +501,7 @@ static RzILOpPure *x86_il_get_gpr32(X86Reg reg, int bits) { if (bits == 32) { return VARG(x86_registers[reg]); } + // RZ_LOG_WARN("hhah\n") return UNSIGNED(32, VARG(x86_registers[reg])); } static RzILOpPure *x86_il_get_gpr64(X86Reg reg, int bits) { @@ -582,9 +591,6 @@ static const struct gpr_lookup_helper_t gpr_lookup_table[] = { [X86_REG_DI] = { 5, x86_il_get_gpr16, x86_il_set_gpr16 }, [X86_REG_EDI] = { 5, x86_il_get_gpr32, x86_il_set_gpr32 }, [X86_REG_RDI] = { 5, x86_il_get_gpr64, x86_il_set_gpr64 }, - [X86_REG_IP] = { 6, x86_il_get_gpr16, x86_il_set_gpr16 }, - [X86_REG_EIP] = { 6, x86_il_get_gpr32, x86_il_set_gpr32 }, - [X86_REG_RIP] = { 6, x86_il_get_gpr64, x86_il_set_gpr64 }, [X86_REG_EIZ] = { 7, x86_il_get_gpr32, x86_il_set_gpr32 }, [X86_REG_RIZ] = { 7, x86_il_get_gpr64, x86_il_set_gpr64 }, [X86_REG_SIL] = { 8, x86_il_get_gprl, x86_il_set_gprl }, @@ -597,26 +603,87 @@ static const struct gpr_lookup_helper_t gpr_lookup_table[] = { [X86_REG_RSP] = { 9, x86_il_get_gpr64, x86_il_set_gpr64 } }; -static RzILOpPure *x86_il_get_reg_bits(X86Reg reg, int bits) { - if (!x86_il_is_gpr(reg)) { - return VARG(x86_registers[reg]); +bool is_pc_reg(X86Reg reg) { + return (reg == X86_REG_IP || reg == X86_REG_EIP || reg == X86_REG_RIP); +} + +struct extreg_lookup_helper_t { + X86Reg curr_reg; + X86Reg base_reg; + RzILOpPure *(*get_handler)(X86Reg, int); + RzILOpEffect *(*set_handler)(X86Reg, RzILOpPure *, int); +}; + +#define extreg_lookup(suff, getter, setter) \ + { X86_REG_R8##suff, X86_REG_R8, getter, setter }, \ + { X86_REG_R9##suff, X86_REG_R9, getter, setter }, \ + { X86_REG_R10##suff, X86_REG_R10, getter, setter }, \ + { X86_REG_R11##suff, X86_REG_R11, getter, setter }, \ + { X86_REG_R12##suff, X86_REG_R12, getter, setter }, \ + { X86_REG_R13##suff, X86_REG_R13, getter, setter }, \ + { X86_REG_R14##suff, X86_REG_R14, getter, setter }, \ + { X86_REG_R15##suff, X86_REG_R15, getter, setter }, + +static const struct extreg_lookup_helper_t extreg_lookup_table[] = { + // 64-bit wide + extreg_lookup(, x86_il_get_gpr64, x86_il_set_gpr64) + + // 8-bit wide (byte) + extreg_lookup(B, x86_il_get_gprl, x86_il_set_gprl) + + // 16-bit wide (word) + extreg_lookup(W, x86_il_get_gpr16, x86_il_set_gpr16) + + // 32-bit wide (dword) + extreg_lookup(D, x86_il_get_gpr32, x86_il_set_gpr32) +}; + +int get_extreg_ind(X86Reg reg) { + for (unsigned int i = 0; i < 8 * 4 /* size of extreg_lookup_table */; i++) { + if (extreg_lookup_table[i].curr_reg == reg) { + return i; + } } - struct gpr_lookup_helper_t entry = gpr_lookup_table[reg]; - /* Need to use `get_bitness_reg` because not all registers - are available in the IL in any particular bitness - (For example, "rax" is not a valid IL variable in 32-bit mode) - So, we need to use the max width register available */ - return entry.get_handler(get_bitness_reg(entry.index, bits), bits); + + return -1; } -#define x86_il_get_reg(reg) x86_il_get_reg_bits(reg, analysis->bits) +static RzILOpPure *x86_il_get_reg_bits(X86Reg reg, int bits, uint64_t pc) { + if (is_pc_reg(reg)) { + return UN(bits, pc); + } + + int ind = -1; + + if (x86_il_is_gpr(reg)) { + struct gpr_lookup_helper_t entry = gpr_lookup_table[reg]; + /* Need to use `get_bitness_reg` because not all registers + are available in the IL in any particular bitness + (For example, "rax" is not a valid IL variable in 32-bit mode) + So, we need to use the max width register available */ + return entry.get_handler(get_bitness_reg(entry.index, bits), bits); + } else if ((ind = get_extreg_ind(reg)) != -1 && bits == 64) { + struct extreg_lookup_helper_t entry = extreg_lookup_table[ind]; + return entry.get_handler(entry.base_reg, bits); + } + + return VARG(x86_registers[reg]); +} + +#define x86_il_get_reg(reg) x86_il_get_reg_bits(reg, analysis->bits, pc) static RzILOpEffect *x86_il_set_reg_bits(X86Reg reg, RzILOpPure *val, int bits) { - if (!x86_il_is_gpr(reg)) { - return SETG(x86_registers[reg], val); + int ind = -1; + + if (x86_il_is_gpr(reg)) { + struct gpr_lookup_helper_t entry = gpr_lookup_table[reg]; + return entry.set_handler(get_bitness_reg(entry.index, bits), val, bits); + } else if ((ind = get_extreg_ind(reg)) != -1 && bits == 64) { + struct extreg_lookup_helper_t entry = extreg_lookup_table[ind]; + return entry.set_handler(entry.base_reg, val, bits); } - struct gpr_lookup_helper_t entry = gpr_lookup_table[reg]; - return entry.set_handler(get_bitness_reg(entry.index, bits), val, bits); + + return SETG(x86_registers[reg], val); } #define x86_il_set_reg(reg, val) x86_il_set_reg_bits(reg, val, analysis->bits) @@ -625,14 +692,14 @@ static RzILOpPure *x86_il_get_memaddr_segment_bits(X86Mem mem, X86Reg segment, i RzILOpPure *offset = NULL; if (mem.base != X86_REG_INVALID) { if (!offset) { - offset = x86_il_get_reg_bits(mem.base, bits); + offset = x86_il_get_reg_bits(mem.base, bits, 0); if (x86_il_get_reg_size(mem.base) != bits) { offset = UNSIGNED(bits, offset); } } } if (mem.index != X86_REG_INVALID) { - RzILOpPure *reg = x86_il_get_reg_bits(mem.index, bits); + RzILOpPure *reg = x86_il_get_reg_bits(mem.index, bits, 0); if (x86_il_get_reg_size(mem.index) != bits) { reg = UNSIGNED(bits, reg); } @@ -655,7 +722,7 @@ static RzILOpPure *x86_il_get_memaddr_segment_bits(X86Mem mem, X86Reg segment, i Address = Segment * 0x10 + Offset */ /* Assuming real mode */ - offset = ADD(offset, SHIFTL0(UNSIGNED(32, x86_il_get_reg_bits(segment, bits)), U8(4))); + offset = ADD(offset, SHIFTL0(UNSIGNED(bits, x86_il_get_reg_bits(segment, bits, 0)), U8(4))); } return offset; @@ -682,7 +749,7 @@ static RzILOpPure *x86_il_get_operand_bits(X86Op op, int analysis_bits) { RZ_LOG_ERROR("x86: RzIL: Invalid param type encountered\n"); break; case X86_OP_REG: - ret = x86_il_get_reg_bits(op.reg, analysis_bits); + ret = x86_il_get_reg_bits(op.reg, analysis_bits, 0); break; case X86_OP_IMM: ret = SN(op.size * BITS_PER_BYTE, op.imm); @@ -2379,7 +2446,7 @@ PopHelper x86_pop_helper_bits(unsigned int op_size, unsigned int bitness) { PopHelper ret; ret.val = LOADW(op_size * BITS_PER_BYTE, x86_il_get_memaddr_bits(stack_mem, bitness)); - ret.eff = x86_il_set_reg_bits(X86_REG_RSP, ADD(x86_il_get_reg_bits(X86_REG_RSP, bitness), UN(bitness, op_size)), bitness); + ret.eff = x86_il_set_reg_bits(X86_REG_RSP, ADD(x86_il_get_reg_bits(X86_REG_RSP, bitness, 0), UN(bitness, op_size)), bitness); return ret; } @@ -2474,7 +2541,7 @@ RzILOpEffect *x86_push_helper_impl(RzILOpPure *val, unsigned int user_op_size, u } RzILOpEffect *ret = STOREW(x86_il_get_memaddr_bits(stack_mem, bitness), UNSIGNED(op_size * BITS_PER_BYTE, val)); - ret = SEQ2(x86_il_set_reg_bits(X86_REG_RSP, SUB(x86_il_get_reg_bits(X86_REG_RSP, bitness), UN(bitness, stack_size)), bitness), ret); + ret = SEQ2(x86_il_set_reg_bits(X86_REG_RSP, SUB(x86_il_get_reg_bits(X86_REG_RSP, bitness, 0), UN(bitness, stack_size)), bitness), ret); return ret; } diff --git a/test/db/asm/x86_16 b/test/db/asm/x86_16 index 08c963c5658..888a82e9e48 100644 --- a/test/db/asm/x86_16 +++ b/test/db/asm/x86_16 @@ -5,19 +5,19 @@ ad "aam" d40a 0x0 (seq (set temp_al (cast 8 false (var ax))) (set ax (| (& (var ad "aam 0x42" d442 0x0 (seq (set temp_al (cast 8 false (var ax))) (set ax (| (& (var ax) (~ (bv 16 0xff00))) (<< (cast 16 false (div (var temp_al) (bv 8 0x42))) (bv 8 0x8) false))) (set adjusted (mod (var temp_al) (bv 8 0x42))) (set ax (| (& (var ax) (~ (bv 16 0xff))) (cast 16 false (var adjusted)))) (set _result (var adjusted)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) ad "aas" 3f 0x0 (seq (branch (|| (! (ule (& (cast 8 false (var ax)) (bv 8 0xf)) (bv 8 0x9))) (var af)) (seq (set ax (- (var ax) (bv 16 0x6))) (set ax (| (& (var ax) (~ (bv 16 0xff00))) (<< (cast 16 false (- (cast 8 false (>> (var ax) (bv 8 0x8) false)) (bv 8 0x1))) (bv 8 0x8) false))) (set af true) (set cf true)) (seq (set af false) (set cf false))) (set ax (| (& (var ax) (~ (bv 16 0xff))) (cast 16 false (& (cast 8 false (var ax)) (bv 8 0xf)))))) adB "cbw" 98 -d "call 0" e8fdff -a "jmp 0x0" ebfe -a "jmp 0x10" eb0e -a "jmp 0x34" eb32 -a "jne 0x14" 7512 -a "jnz 0x94" 660f858d000000 -a "jnz -0x94" 660f8565ffffff -a "jno -0x34" 71ca +d "call 0" e8fdff 0x0 (seq (set _cs (cast 16 false (var cs))) (set sp (- (var sp) (bv 16 0x2))) (storew 0 (+ (+ (cast 16 false (var sp)) (bv 16 0x0)) (<< (cast 16 false (var ss)) (bv 8 0x4) false)) (cast 16 false (var _cs))) (set _pc (bv 16 0x0)) (set sp (- (var sp) (bv 16 0x2))) (storew 0 (+ (+ (cast 16 false (var sp)) (bv 16 0x0)) (<< (cast 16 false (var ss)) (bv 8 0x4) false)) (cast 16 false (var _pc)))) +a "jmp 0x0" ebfe 0x0 (jmp (+ (bv 16 0x0) (bv 16 0x0))) +a "jmp 0x10" eb0e 0x0 (jmp (+ (bv 16 0x0) (bv 16 0x10))) +a "jmp 0x34" eb32 0x0 (jmp (+ (bv 16 0x0) (bv 16 0x34))) +a "jne 0x14" 7512 0x0 (branch (! (var zf)) (jmp (+ (bv 16 0x0) (bv 16 0x14))) nop) +a "jnz 0x94" 660f858d000000 0x0 (branch (! (var zf)) (jmp (+ (bv 16 0x0) (bv 16 0x94))) nop) +a "jnz -0x94" 660f8565ffffff 0x0 (branch (! (var zf)) (jmp (+ (bv 16 0x0) (bv 16 0xff6c))) nop) +a "jno -0x34" 71ca 0x0 (branch (! (var of)) (jmp (+ (bv 16 0x0) (bv 16 0xffcc))) nop) dB "jmp 0xfec50" e95bec -d "jmp 0x1fec50" e95bec 0x001ffff2 -a "mov al, [0xbeef]" a0efbe -a "mov ax, [0xbeef]" a1efbe -a "test bl, 0x12" f6c312 -a "test bx, 0x1234" f7c33412 +d "jmp 0x1fec50" e95bec 0x1ffff2 (jmp (+ (bv 16 0xfff2) (bv 16 0xec50))) +a "mov al, [0xbeef]" a0efbe 0x0 (set ax (| (& (var ax) (~ (bv 16 0xff))) (cast 16 false (loadw 0 8 (bv 16 0xbeef))))) +a "mov ax, [0xbeef]" a1efbe 0x0 (set ax (loadw 0 16 (bv 16 0xbeef))) +a "test bl, 0x12" f6c312 0x0 (seq (set _res (& (cast 8 false (var bx)) (bv 8 0x12))) (set bx (| (& (var bx) (~ (bv 16 0xff))) (cast 16 false (var _res)))) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test bx, 0x1234" f7c33412 0x0 (seq (set _res (& (var bx) (bv 16 0x1234))) (set bx (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) aB "test byte [bx], 0x12" f60712 aB "test word [bx], 0x1234" f7073412 diff --git a/test/db/asm/x86_64 b/test/db/asm/x86_64 index f95a8c2ae32..7e5c553200a 100644 --- a/test/db/asm/x86_64 +++ b/test/db/asm/x86_64 @@ -1,982 +1,982 @@ -a "lea rax, [0x1000]" 488d05f90f0000 -d "lea rax, [rip + 0xff9]" 488d05f90f0000 -ad "nop" 90 -ad "ret" c3 -a "add r13, r15" 4d01fd -a "add r15, rbx" 4901df -a "add rax, 44" 4883c02c -a "add rax, r8" 4c01c0 -a "add r10, r9" 4d01ca -a "add rax, rcx" 4801c8 -aB "and dword [ebp + 128], eax" 48218580000000 -a "call rbx" ffd3 -a "cdqe" 4898 -a "cmp rax, 33" 4883f821 -a "cmp rax, rbx" 4839d8 -a "cmp rbx, rax" 4839c3 -a "cmp rdx, rsi" 4839f2 -a "inc rdx" 48ffc2 -a "jmp rbx" ffe3 -a "lea rax, [rax+0]" 488d00 -a "lea rax, [rax+1]" 488d4001 -a "lea rax, [rax-0]" 488d00 -a "lea rax, [rax-1]" 488d40ff -a "lea rax, [rax]" 488d00 -aB "lea rax,[rel -10]" 488d06f6ffffff -aB "lea rax,[rel 0]" 488d0500000000 -aB "lea rax,[rel 10]" 488d050a000000 -a "lea rax,[rip+0]" 488d0500000000 -a "lea rax,[rip+10]" 488d050a000000 -a "lea rax,[rip-0]" 488d0500000000 -a "lea rax,[rip-10]" 488d05f6ffffff -a "lea rax,[rip]" 488d0500000000 -a "lea rdi,[rip+0x1011]" 488d3d11100000 -aB "lea rax, [0x803]" 488d042503080000 -aB "lea rax, 0x803" 488d042503080000 -a "mov [rsi], rbx" 48891e -ad "mov eax, 0" b800000000 -ad "mov ecx, 0x7fffffff" b9ffffff7f -a "mov esi, -0x80000000" be00000080 -ad "mov esi, 0x80000000" be00000080 -a "mov edi, -1" bfffffffff -ad "mov edi, 0xffffffff" bfffffffff -a "mov rax, 0x1122334455667788" 48b88877665544332211 -a "mov rax, 3" 48c7c003000000 -a "mov rax, 33" 48c7c021000000 -ad "mov rax, 0x7fffffff" 48c7c0ffffff7f -a "mov rax, 0x80000000" 48b80000008000000000 -ad "movabs rax, 0x80000000" 48b80000008000000000 -a "mov rax, 0xdeadbeef" 48b8efbeadde00000000 -ad "movabs rax, 0xdeadbeef" 48b8efbeadde00000000 -a "mov rax, 0xffffffff" 48b8ffffffff00000000 -ad "movabs rax, 0xffffffff" 48b8ffffffff00000000 -a "mov rax, 0x100000000" 48b80000000001000000 -ad "movabs rax, 0x100000000" 48b80000000001000000 -ad "mov rax, 0" 48c7c000000000 -a "mov rax, -1" 48c7c0ffffffff -a "mov rax, -0x1" 48c7c0ffffffff -ad "mov rax, 0xffffffffffffffff" 48c7c0ffffffff -a "mov rax, 0xFfFFffFFFFffffff" 48c7c0ffffffff -a "mov rax, -1U" 48c7c0ffffffff -a "mov rax, 0xffffffffffffffffU" 48c7c0ffffffff -a "mov rax, -2" 48c7c0feffffff -ad "mov rax, 0xfffffffffffffffe" 48c7c0feffffff -a "mov rax, -0x80000000" 48c7c000000080 -ad "mov rax, 0xffffffff80000000" 48c7c000000080 -a "mov rax, -0x80000001" 48b8ffffff7fffffffff -ad "movabs rax, 0xffffffff7fffffff" 48b8ffffff7fffffffff -ad "mov r9, 0x7fffffff" 49c7c1ffffff7f -a "mov r10, 0x80000000" 49ba0000008000000000 -ad "movabs r10, 0x80000000" 49ba0000008000000000 -a "mov r11, 0x100000000" 49bb0000000001000000 -ad "movabs r11, 0x100000000" 49bb0000000001000000 -a "mov r14, -0x80000000" 49c7c600000080 -ad "mov r14, 0xffffffff80000000" 49c7c600000080 -a "mov r15, -0x80000001" 49bfffffff7fffffffff -ad "movabs r15, 0xffffffff7fffffff" 49bfffffff7fffffffff -a "mov rax, [rax+0]" 488b00 -a "mov rax, [rax+1]" 488b4001 -a "mov rax, [rax-0]" 488b00 -a "mov rax, [rax-1]" 488b40ff -a "mov rax, [rax]" 488b00 -aB "mov rax,[rel -10]" 488b05f6ffffff -aB "mov rax,[rel 0]" 488b0500000000 -aB "mov rax,[rel 10]" 488b050a000000 -a "mov rax,[rip+0]" 488b0500000000 -a "mov rax,[rip+10]" 488b050a000000 -a "mov rax,[rip-0]" 488b0500000000 -a "mov rax,[rip-10]" 488b05f6ffffff -a "mov rax,[rip]" 488b0500000000 -a "mov rbx, 3" 48c7c303000000 -a "mov edx, [rbp-4]" 8b55fc -a "mov rbx, rax" 4889c3 -a "mov rcx, -0x1122334455667788" 48b9788899aabbccddee -aB "mov rcx, -0x112233445566778899" 00 -a "mov rsi, rbx" 4889de -a "mov rcx, r9" 4c89c9 -a "mov r10, rax" 4989c2 -a "mov r12, r9" 4d89cc -a "mov rcx, rbp" 4889e9 -a "mov al, [0xbeef]" a0efbe000000000000 -a "mov ax, [0xbeef]" 66a1efbe000000000000 -a "mov eax, [0xbeef]" a1efbe000000000000 -a "mov rax, [0xbeef]" 48a1efbe000000000000 -a "mov rax, [0x1122334455667788]" 48a18877665544332211 -a "mov rax, [rax + 0xbeef]" 488b80efbe0000 -a "mov rax, [rbx + 0xbeef]" 488b83efbe0000 -a "mov rcx, [rbx + 0xbeef]" 488b8befbe0000 -a "mov rbx, [rbp + 0xbeef]" 488b9defbe0000 -a "mov rax, [rip + 0xbeef]" 488b05efbe0000 -aB "mov sil, 0" 40b600 -aB "mov dil, -5" 40b7fb -aB "mov spl, bpl" 4088ec -a "pop rax" 58 -ad "pop r8" 4158 -ad "pop r15" 415f +a "lea rax, [0x1000]" 488d05f90f0000 0x0 (set rax (+ (bv 64 0x0) (bv 64 0xff9))) +d "lea rax, [rip + 0xff9]" 488d05f90f0000 0x0 (set rax (+ (bv 64 0x0) (bv 64 0xff9))) +ad "nop" 90 0x0 nop +ad "ret" c3 0x0 (seq (set rsp (+ (var rsp) (bv 64 0x8))) (set rsp (loadw 0 64 (+ (var rsp) (bv 64 0x0))))) +a "add r13, r15" 4d01fd 0x0 (seq (set op1 (var r13)) (set op2 (var r15)) (set sum (+ (var op1) (var op2))) (set r13 (var sum)) (set _result (var sum)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result)))))))) +a "add r15, rbx" 4901df 0x0 (seq (set op1 (var r15)) (set op2 (var rbx)) (set sum (+ (var op1) (var op2))) (set r15 (var sum)) (set _result (var sum)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result)))))))) +a "add rax, 44" 4883c02c 0x0 (seq (set op1 (var rax)) (set op2 (bv 64 0x2c)) (set sum (+ (var op1) (var op2))) (set rax (var sum)) (set _result (var sum)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result)))))))) +a "add rax, r8" 4c01c0 0x0 (seq (set op1 (var rax)) (set op2 (var r8)) (set sum (+ (var op1) (var op2))) (set rax (var sum)) (set _result (var sum)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result)))))))) +a "add r10, r9" 4d01ca 0x0 (seq (set op1 (var r10)) (set op2 (var r9)) (set sum (+ (var op1) (var op2))) (set r10 (var sum)) (set _result (var sum)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result)))))))) +a "add rax, rcx" 4801c8 0x0 (seq (set op1 (var rax)) (set op2 (var rcx)) (set sum (+ (var op1) (var op2))) (set rax (var sum)) (set _result (var sum)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result)))))))) +aB "and dword [ebp + 128], eax" 48218580000000 0x0 hjh +a "call rbx" ffd3 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +a "cdqe" 4898 0x0 empty +a "cmp rax, 33" 4883f821 0x0 (seq (set op1 (var rax)) (set op2 (bv 64 0x21)) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "cmp rax, rbx" 4839d8 0x0 (seq (set op1 (var rax)) (set op2 (var rbx)) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "cmp rbx, rax" 4839c3 0x0 (seq (set op1 (var rbx)) (set op2 (var rax)) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "cmp rdx, rsi" 4839f2 0x0 (seq (set op1 (var rdx)) (set op2 (var rsi)) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rdx" 48ffc2 0x0 (seq (set _op (var rdx)) (set _result (+ (var _op) (bv 64 0x1))) (set rdx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "jmp rbx" ffe3 0x0 (jmp (cast 64 false (var rbx))) +a "lea rax, [rax+0]" 488d00 0x0 (set rax (+ (var rax) (bv 64 0x0))) +a "lea rax, [rax+1]" 488d4001 0x0 (set rax (+ (var rax) (bv 64 0x1))) +a "lea rax, [rax-0]" 488d00 0x0 (set rax (+ (var rax) (bv 64 0x0))) +a "lea rax, [rax-1]" 488d40ff 0x0 (set rax (+ (var rax) (bv 64 0xffffffffffffffff))) +a "lea rax, [rax]" 488d00 0x0 (set rax (+ (var rax) (bv 64 0x0))) +aB "lea rax,[rel -10]" 488d06f6ffffff 0x0 hjh +aB "lea rax,[rel 0]" 488d0500000000 0x0 hjh +aB "lea rax,[rel 10]" 488d050a000000 0x0 hjh +a "lea rax,[rip+0]" 488d0500000000 0x0 (set rax (+ (bv 64 0x0) (bv 64 0x0))) +a "lea rax,[rip+10]" 488d050a000000 0x0 (set rax (+ (bv 64 0x0) (bv 64 0xa))) +a "lea rax,[rip-0]" 488d0500000000 0x0 (set rax (+ (bv 64 0x0) (bv 64 0x0))) +a "lea rax,[rip-10]" 488d05f6ffffff 0x0 (set rax (+ (bv 64 0x0) (bv 64 0xfffffffffffffff6))) +a "lea rax,[rip]" 488d0500000000 0x0 (set rax (+ (bv 64 0x0) (bv 64 0x0))) +a "lea rdi,[rip+0x1011]" 488d3d11100000 0x0 (set rdi (+ (bv 64 0x0) (bv 64 0x1011))) +aB "lea rax, [0x803]" 488d042503080000 0x0 hjh +aB "lea rax, 0x803" 488d042503080000 0x0 hjh +a "mov [rsi], rbx" 48891e 0x0 (storew 0 (+ (var rsi) (bv 64 0x0)) (var rbx)) +ad "mov eax, 0" b800000000 0x0 (set rax (| (& (var rax) (~ (bv 64 0xffffffff))) (cast 64 false (bv 32 0x0)))) +ad "mov ecx, 0x7fffffff" b9ffffff7f 0x0 (set rcx (| (& (var rcx) (~ (bv 64 0xffffffff))) (cast 64 false (bv 32 0x7fffffff)))) +a "mov esi, -0x80000000" be00000080 0x0 (set rsi (| (& (var rsi) (~ (bv 64 0xffffffff))) (cast 64 false (bv 32 0x80000000)))) +ad "mov esi, 0x80000000" be00000080 0x0 (set rsi (| (& (var rsi) (~ (bv 64 0xffffffff))) (cast 64 false (bv 32 0x80000000)))) +a "mov edi, -1" bfffffffff 0x0 (set rdi (| (& (var rdi) (~ (bv 64 0xffffffff))) (cast 64 false (bv 32 0xffffffff)))) +ad "mov edi, 0xffffffff" bfffffffff 0x0 (set rdi (| (& (var rdi) (~ (bv 64 0xffffffff))) (cast 64 false (bv 32 0xffffffff)))) +a "mov rax, 0x1122334455667788" 48b88877665544332211 0x0 empty +a "mov rax, 3" 48c7c003000000 0x0 (set rax (bv 64 0x3)) +a "mov rax, 33" 48c7c021000000 0x0 (set rax (bv 64 0x21)) +ad "mov rax, 0x7fffffff" 48c7c0ffffff7f 0x0 (set rax (bv 64 0x7fffffff)) +a "mov rax, 0x80000000" 48b80000008000000000 0x0 empty +ad "movabs rax, 0x80000000" 48b80000008000000000 0x0 empty +a "mov rax, 0xdeadbeef" 48b8efbeadde00000000 0x0 empty +ad "movabs rax, 0xdeadbeef" 48b8efbeadde00000000 0x0 empty +a "mov rax, 0xffffffff" 48b8ffffffff00000000 0x0 empty +ad "movabs rax, 0xffffffff" 48b8ffffffff00000000 0x0 empty +a "mov rax, 0x100000000" 48b80000000001000000 0x0 empty +ad "movabs rax, 0x100000000" 48b80000000001000000 0x0 empty +ad "mov rax, 0" 48c7c000000000 0x0 (set rax (bv 64 0x0)) +a "mov rax, -1" 48c7c0ffffffff 0x0 (set rax (bv 64 0xffffffffffffffff)) +a "mov rax, -0x1" 48c7c0ffffffff 0x0 (set rax (bv 64 0xffffffffffffffff)) +ad "mov rax, 0xffffffffffffffff" 48c7c0ffffffff 0x0 (set rax (bv 64 0xffffffffffffffff)) +a "mov rax, 0xFfFFffFFFFffffff" 48c7c0ffffffff 0x0 (set rax (bv 64 0xffffffffffffffff)) +a "mov rax, -1U" 48c7c0ffffffff 0x0 (set rax (bv 64 0xffffffffffffffff)) +a "mov rax, 0xffffffffffffffffU" 48c7c0ffffffff 0x0 (set rax (bv 64 0xffffffffffffffff)) +a "mov rax, -2" 48c7c0feffffff 0x0 (set rax (bv 64 0xfffffffffffffffe)) +ad "mov rax, 0xfffffffffffffffe" 48c7c0feffffff 0x0 (set rax (bv 64 0xfffffffffffffffe)) +a "mov rax, -0x80000000" 48c7c000000080 0x0 (set rax (bv 64 0xffffffff80000000)) +ad "mov rax, 0xffffffff80000000" 48c7c000000080 0x0 (set rax (bv 64 0xffffffff80000000)) +a "mov rax, -0x80000001" 48b8ffffff7fffffffff 0x0 empty +ad "movabs rax, 0xffffffff7fffffff" 48b8ffffff7fffffffff 0x0 empty +ad "mov r9, 0x7fffffff" 49c7c1ffffff7f 0x0 (set r9 (bv 64 0x7fffffff)) +a "mov r10, 0x80000000" 49ba0000008000000000 0x0 empty +ad "movabs r10, 0x80000000" 49ba0000008000000000 0x0 empty +a "mov r11, 0x100000000" 49bb0000000001000000 0x0 empty +ad "movabs r11, 0x100000000" 49bb0000000001000000 0x0 empty +a "mov r14, -0x80000000" 49c7c600000080 0x0 (set r14 (bv 64 0xffffffff80000000)) +ad "mov r14, 0xffffffff80000000" 49c7c600000080 0x0 (set r14 (bv 64 0xffffffff80000000)) +a "mov r15, -0x80000001" 49bfffffff7fffffffff 0x0 empty +ad "movabs r15, 0xffffffff7fffffff" 49bfffffff7fffffffff 0x0 empty +a "mov rax, [rax+0]" 488b00 0x0 (set rax (loadw 0 64 (+ (var rax) (bv 64 0x0)))) +a "mov rax, [rax+1]" 488b4001 0x0 (set rax (loadw 0 64 (+ (var rax) (bv 64 0x1)))) +a "mov rax, [rax-0]" 488b00 0x0 (set rax (loadw 0 64 (+ (var rax) (bv 64 0x0)))) +a "mov rax, [rax-1]" 488b40ff 0x0 (set rax (loadw 0 64 (+ (var rax) (bv 64 0xffffffffffffffff)))) +a "mov rax, [rax]" 488b00 0x0 (set rax (loadw 0 64 (+ (var rax) (bv 64 0x0)))) +aB "mov rax,[rel -10]" 488b05f6ffffff 0x0 hjh +aB "mov rax,[rel 0]" 488b0500000000 0x0 hjh +aB "mov rax,[rel 10]" 488b050a000000 0x0 hjh +a "mov rax,[rip+0]" 488b0500000000 0x0 (set rax (loadw 0 64 (+ (bv 64 0x0) (bv 64 0x0)))) +a "mov rax,[rip+10]" 488b050a000000 0x0 (set rax (loadw 0 64 (+ (bv 64 0x0) (bv 64 0xa)))) +a "mov rax,[rip-0]" 488b0500000000 0x0 (set rax (loadw 0 64 (+ (bv 64 0x0) (bv 64 0x0)))) +a "mov rax,[rip-10]" 488b05f6ffffff 0x0 (set rax (loadw 0 64 (+ (bv 64 0x0) (bv 64 0xfffffffffffffff6)))) +a "mov rax,[rip]" 488b0500000000 0x0 (set rax (loadw 0 64 (+ (bv 64 0x0) (bv 64 0x0)))) +a "mov rbx, 3" 48c7c303000000 0x0 (set rbx (bv 64 0x3)) +a "mov edx, [rbp-4]" 8b55fc 0x0 (set rdx (| (& (var rdx) (~ (bv 64 0xffffffff))) (cast 64 false (loadw 0 32 (+ (var rbp) (bv 64 0xfffffffffffffffc)))))) +a "mov rbx, rax" 4889c3 0x0 (set rbx (var rax)) +a "mov rcx, -0x1122334455667788" 48b9788899aabbccddee 0x0 empty +aB "mov rcx, -0x112233445566778899" 00 0x0 hjh +a "mov rsi, rbx" 4889de 0x0 (set rsi (var rbx)) +a "mov rcx, r9" 4c89c9 0x0 (set rcx (var r9)) +a "mov r10, rax" 4989c2 0x0 (set r10 (var rax)) +a "mov r12, r9" 4d89cc 0x0 (set r12 (var r9)) +a "mov rcx, rbp" 4889e9 0x0 (set rcx (var rbp)) +a "mov al, [0xbeef]" a0efbe000000000000 0x0 empty +a "mov ax, [0xbeef]" 66a1efbe000000000000 0x0 empty +a "mov eax, [0xbeef]" a1efbe000000000000 0x0 empty +a "mov rax, [0xbeef]" 48a1efbe000000000000 0x0 empty +a "mov rax, [0x1122334455667788]" 48a18877665544332211 0x0 empty +a "mov rax, [rax + 0xbeef]" 488b80efbe0000 0x0 (set rax (loadw 0 64 (+ (var rax) (bv 64 0xbeef)))) +a "mov rax, [rbx + 0xbeef]" 488b83efbe0000 0x0 (set rax (loadw 0 64 (+ (var rbx) (bv 64 0xbeef)))) +a "mov rcx, [rbx + 0xbeef]" 488b8befbe0000 0x0 (set rcx (loadw 0 64 (+ (var rbx) (bv 64 0xbeef)))) +a "mov rbx, [rbp + 0xbeef]" 488b9defbe0000 0x0 (set rbx (loadw 0 64 (+ (var rbp) (bv 64 0xbeef)))) +a "mov rax, [rip + 0xbeef]" 488b05efbe0000 0x0 (set rax (loadw 0 64 (+ (bv 64 0x0) (bv 64 0xbeef)))) +aB "mov sil, 0" 40b600 0x0 hjh +aB "mov dil, -5" 40b7fb 0x0 hjh +aB "mov spl, bpl" 4088ec 0x0 hjh +a "pop rax" 58 0x0 (seq (set rax (loadw 0 64 (+ (var rsp) (bv 64 0x0)))) (set rsp (+ (var rsp) (bv 64 0x8)))) +ad "pop r8" 4158 0x0 (seq (set r8 (loadw 0 64 (+ (var rsp) (bv 64 0x0)))) (set rsp (+ (var rsp) (bv 64 0x8)))) +ad "pop r15" 415f 0x0 (seq (set r15 (loadw 0 64 (+ (var rsp) (bv 64 0x0)))) (set rsp (+ (var rsp) (bv 64 0x8)))) aB "prefetcht1 [eax]" 670f1810 aB "prefetcht1 [rax]" 0f1810 aB "prefetcht1 byte [eax]" 670f1810 aB "prefetcht1 byte [rax]" 0f1810 -a "shl rdx, 5" 48c1e205 -a "sub rax, 44" 4883e82c -a "sub rax, rbx" 4829d8 -a "sub r9, rbx" 4929d9 -a "sub rcx, r10" 4c29d1 -a "sub r12, r11" 4d29dc -a "test ebx, 0x12345678" f7c378563412 -a "test rbx, 0x12345678" 48f7c378563412 -a "test dword [eax], 0x12345678" 67f70078563412 -a "test dword [rax], 0x12345678" f70078563412 -a "test qword [rcx], 0x12345678" 48f70178563412 -a "test rax, rbx" 4885d8 -a "test rcx, rcx" 4885c9 -a "test rdx, rsi" 4885f2 -a "test r8, r8" 4d85c0 -a "xor [rax], rax" 483100 -a "xor [rsi], rbx" 48311e -a "xor rax, rax" 4831c0 -a "xor rdx, rdx" 4831d2 +a "shl rdx, 5" 48c1e205 0x0 (seq (set _cnt (bv 8 0x5)) (set _cnt_mask (bv 8 0x3f)) (set _masked (& (var _cnt) (var _cnt_mask))) (set _tmp_cnt (var _masked)) (set _dest (var rdx)) (set _tmp_dest (var _dest)) (repeat (! (is_zero (var _tmp_cnt))) (seq (set cf (msb (var _dest))) (set _dest (<< (var _dest) (bv 8 0x1) false)) (set _tmp_cnt (- (var _tmp_cnt) (bv 8 0x1))))) (branch (== (var _masked) (bv 8 0x1)) (set of (^^ (msb (var _dest)) (var cf))) nop)) +a "sub rax, 44" 4883e82c 0x0 (seq (set op1 (var rax)) (set op2 (bv 64 0x2c)) (set sub (- (var op1) (var op2))) (set rax (var sub)) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "sub rax, rbx" 4829d8 0x0 (seq (set op1 (var rax)) (set op2 (var rbx)) (set sub (- (var op1) (var op2))) (set rax (var sub)) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "sub r9, rbx" 4929d9 0x0 (seq (set op1 (var r9)) (set op2 (var rbx)) (set sub (- (var op1) (var op2))) (set r9 (var sub)) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "sub rcx, r10" 4c29d1 0x0 (seq (set op1 (var rcx)) (set op2 (var r10)) (set sub (- (var op1) (var op2))) (set rcx (var sub)) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "sub r12, r11" 4d29dc 0x0 (seq (set op1 (var r12)) (set op2 (var r11)) (set sub (- (var op1) (var op2))) (set r12 (var sub)) (set _result (var sub)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "test ebx, 0x12345678" f7c378563412 0x0 (seq (set _res (& (cast 32 false (var rbx)) (bv 32 0x12345678))) (set rbx (| (& (var rbx) (~ (bv 64 0xffffffff))) (cast 64 false (var _res)))) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test rbx, 0x12345678" 48f7c378563412 0x0 (seq (set _res (& (var rbx) (bv 64 0x12345678))) (set rbx (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test dword [eax], 0x12345678" 67f70078563412 0x0 (seq (set _res (& (loadw 0 32 (+ (cast 64 false (cast 32 false (var rax))) (bv 64 0x0))) (bv 32 0x12345678))) (storew 0 (+ (cast 64 false (cast 32 false (var rax))) (bv 64 0x0)) (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test dword [rax], 0x12345678" f70078563412 0x0 (seq (set _res (& (loadw 0 32 (+ (var rax) (bv 64 0x0))) (bv 32 0x12345678))) (storew 0 (+ (var rax) (bv 64 0x0)) (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test qword [rcx], 0x12345678" 48f70178563412 0x0 (seq (set _res (& (loadw 0 64 (+ (var rcx) (bv 64 0x0))) (bv 64 0x12345678))) (storew 0 (+ (var rcx) (bv 64 0x0)) (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test rax, rbx" 4885d8 0x0 (seq (set _res (& (var rax) (var rbx))) (set rax (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test rcx, rcx" 4885c9 0x0 (seq (set _res (& (var rcx) (var rcx))) (set rcx (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test rdx, rsi" 4885f2 0x0 (seq (set _res (& (var rdx) (var rsi))) (set rdx (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "test r8, r8" 4d85c0 0x0 (seq (set _res (& (var r8) (var r8))) (set r8 (var _res)) (set _result (var _res)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false)) +a "xor [rax], rax" 483100 0x0 (seq (set _xor (^ (loadw 0 64 (+ (var rax) (bv 64 0x0))) (var rax))) (storew 0 (+ (var rax) (bv 64 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "xor [rsi], rbx" 48311e 0x0 (seq (set _xor (^ (loadw 0 64 (+ (var rsi) (bv 64 0x0))) (var rbx))) (storew 0 (+ (var rsi) (bv 64 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "xor rax, rax" 4831c0 0x0 (seq (set _xor (^ (var rax) (var rax))) (set rax (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "xor rdx, rdx" 4831d2 0x0 (seq (set _xor (^ (var rdx) (var rdx))) (set rdx (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) a "rep movsd" f3a5 a "repnz stosd" f2ab a "repz monitor" f30f01c8 a "repe vmcall" f30f01c1 a "repne sfence" f20faef8 a "rep rdpmc" f30f33 -a "mov eax, 33" b821000000 -a "mov rax, 33" 48c7c021000000 -a "mov dword ptr [rbp+4],0" c7450400000000 -a "mov qword ptr [rbp+4],0" 48c7450400000000 -a "mov [rbp+4],0" 48c7450400000000 -a "mov [ebp+4],0" 67c7450400000000 -ad "push r8" 4150 -ad "push r9" 4151 -ad "push r10" 4152 -ad "push r11" 4153 -ad "push r12" 4154 -ad "push r13" 4155 -ad "push r14" 4156 -ad "push r15" 4157 +a "mov eax, 33" b821000000 0x0 (set rax (| (& (var rax) (~ (bv 64 0xffffffff))) (cast 64 false (bv 32 0x21)))) +a "mov rax, 33" 48c7c021000000 0x0 (set rax (bv 64 0x21)) +a "mov dword ptr [rbp+4],0" c7450400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0x4)) (bv 32 0x0)) +a "mov qword ptr [rbp+4],0" 48c7450400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0x4)) (bv 64 0x0)) +a "mov [rbp+4],0" 48c7450400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0x4)) (bv 64 0x0)) +a "mov [ebp+4],0" 67c7450400000000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rbp))) (bv 64 0x4)) (bv 32 0x0)) +ad "push r8" 4150 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r8)))) +ad "push r9" 4151 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r9)))) +ad "push r10" 4152 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r10)))) +ad "push r11" 4153 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r11)))) +ad "push r12" 4154 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r12)))) +ad "push r13" 4155 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r13)))) +ad "push r14" 4156 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r14)))) +ad "push r15" 4157 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 64 false (var r15)))) -ad "call r8" 41ffd0 -ad "call r9" 41ffd1 -ad "call r10" 41ffd2 -ad "call r11" 41ffd3 -ad "call r12" 41ffd4 -ad "call r13" 41ffd5 -ad "call r14" 41ffd6 -ad "call r15" 41ffd7 -a "mov dword ptr [rax],0x1" c70001000000 -a "mov qword [rax], 0x1" 48c70001000000 -a "mov [rax], 0x1" 48c70001000000 -a "mov byte ptr [rip+0x203cb8],0x1" c605b83c200001 -a "mov dword ptr [rip+0x203817],0x42" c7051738200042000000 -a "mov dword ptr [rip+0x20380b],0x54" c7050b38200054000000 -a "mov dword ptr [rip+0x2037ff],0x4f" c705ff3720004f000000 -a "mov dword ptr [rip+0x2037f3],0x49" c705f337200049000000 -a "mov dword ptr [rip+0x2037e7],0x30" c705e737200030000000 -a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 -a "mov dword ptr [rbp-0x1100],0x0" c78500efffff00000000 -a "mov dword ptr [rbp-0x10fc],0x0" c78504efffff00000000 -a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 -a "mov byte ptr [rbp-0x110a],0x66" c685f6eeffff66 -a "mov qword ptr [rbp-0x10b0],0x0" 48c78550efffff00000000 -a "mov dword ptr [rbp-0x10f8],0x0" c78508efffff00000000 -a "mov dword ptr [rbp-0x10f8],0x0" c78508efffff00000000 -a "mov dword ptr [rbp-0x10d4],0xc" c7852cefffff0c000000 -a "mov dword ptr [rbp-0x1100],0x0" c78500efffff00000000 -a "mov byte ptr [rbp-0x110a],0x42" c685f6eeffff42 -a "mov byte ptr [rbp-0x110a],0x54" c685f6eeffff54 -a "mov byte ptr [rbp-0x110a],0x46" c685f6eeffff46 -a "mov byte ptr [rax],0x30" c60030 -a "mov byte ptr [rbp-0x110a],0x42" c685f6eeffff42 -a "mov byte ptr [rax],0x30" c60030 -a "mov byte ptr [rbp-0x110a],0x54" c685f6eeffff54 -a "mov byte ptr [rax],0x30" c60030 -a "mov byte ptr [rbp-0x110a],0x4f" c685f6eeffff4f -a "mov byte ptr [rax],0x30" c60030 -a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 -a "mov byte ptr [rax],0x62" c60062 -a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 -a "mov byte ptr [rax],0x74" c60074 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x10],0xffffffff" c745f0ffffffff -a "mov dword ptr [rbp-0x10],0x1" c745f001000000 -a "mov dword ptr [rbp-0x4],0x1" c745fc01000000 -a "mov byte ptr [rip+0x207200],0x1" c6050072200001 -a "mov dword ptr [rbp-0xc],0x0" c745f400000000 -a "mov qword ptr [rip+0x2687bd],0x0" 48c705bd87260000000000 -a "mov dword ptr [rbp-0x18c],0x0" c78574feffff00000000 -a "mov dword ptr [rbp-0x18c],0x1" c78574feffff01000000 -a "mov dword ptr [rbp-0x114],0x0" c785ecfeffff00000000 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rip+0x2068f4],0x0" 48c705f468200000000000 -a "mov byte ptr [rbp-0x31],0x0" c645cf00 -a "mov byte ptr [rbp-0x31],0x1" c645cf01 -a "mov qword ptr [rbp-0x28],0x0" 48c745d800000000 -a "mov qword ptr [rbp-0x288],0x0" 48c78578fdffff00000000 -a "mov qword ptr [rbp-0x280],0x0" 48c78580fdffff00000000 -a "mov qword ptr [rbp-0x270],0x0" 48c78590fdffff00000000 -a "mov qword ptr [rbp-0x268],0x0" 48c78598fdffff00000000 -a "mov qword ptr [rbp-0x260],0x0" 48c785a0fdffff00000000 -a "mov qword ptr [rbp-0x1d0],0x0" 48c78530feffff00000000 -a "mov dword ptr [rbp-0x2c4],0x0" c7853cfdffff00000000 -a "mov dword ptr [rbp-0x2c0],0x0" c78540fdffff00000000 -a "mov dword ptr [rbp-0x2bc],0x0" c78544fdffff00000000 -a "mov byte ptr [rbp-0x2d4],0x0" c6852cfdffff00 -a "mov dword ptr [rbp-0x2b8],0x0" c78548fdffff00000000 -a "mov byte ptr [rbp-0x2d3],0x0" c6852dfdffff00 -a "mov dword ptr [rbp-0x2b4],0x0" c7854cfdffff00000000 -a "mov dword ptr [rbp-0x2b0],0x1" c78550fdffff01000000 -a "mov dword ptr [rbp-0x2ac],0x1" c78554fdffff01000000 -a "mov dword ptr [rbp-0x2a4],0x5" c7855cfdffff05000000 -a "mov byte ptr [rbp-0x2d2],0x0" c6852efdffff00 -a "mov byte ptr [rbp-0x2d1],0x0" c6852ffdffff00 -a "mov qword ptr [rbp-0x248],0x0" 48c785b8fdffff00000000 -a "mov qword ptr [rbp-0x240],0x0" 48c785c0fdffff00000000 -a "mov qword ptr [rbp-0x230],0x0" 48c785d0fdffff00000000 -a "mov qword ptr [rbp-0x228],0x0" 48c785d8fdffff00000000 -a "mov qword ptr [rbp-0x220],0x0" 48c785e0fdffff00000000 -a "mov qword ptr [rbp-0x218],0x0" 48c785e8fdffff00000000 -a "mov qword ptr [rbp-0x210],0x0" 48c785f0fdffff00000000 -a "mov qword ptr [rbp-0x208],0x0" 48c785f8fdffff00000000 -a "mov byte ptr [rbp-0x2d0],0x0" c68530fdffff00 -a "mov byte ptr [rbp-0x2cf],0x0" c68531fdffff00 -a "mov dword ptr [rbp-0x2a0],0x0" c78560fdffff00000000 -a "mov qword ptr [rbp-0x200],0x0" 48c78500feffff00000000 -a "mov byte ptr [rbp-0x2ce],0x0" c68532fdffff00 -a "mov dword ptr [rbp-0x2b8],0x1" c78548fdffff01000000 -a "mov dword ptr [rbp-0x2b8],0x0" c78548fdffff00000000 -a "mov dword ptr [rip+0x267855],0x1" c7055578260001000000 -a "mov byte ptr [rbp-0x2ce],0x1" c68532fdffff01 -a "mov byte ptr [rbp-0x2d3],0x1" c6852dfdffff01 -a "mov byte ptr [rbp-0x2d0],0x1" c68530fdffff01 -a "mov dword ptr [rbp-0x2bc],0x1" c78544fdffff01000000 -a "mov dword ptr [rbp-0x2c4],0x1" c7853cfdffff01000000 -a "mov dword ptr [rbp-0x2c4],0x2" c7853cfdffff02000000 -a "mov byte ptr [rbp-0x2d4],0x1" c6852cfdffff01 -a "mov byte ptr [rbp-0x2d1],0x1" c6852ffdffff01 -a "mov dword ptr [rbp-0x2ac],0x0" c78554fdffff00000000 -a "mov byte ptr [rbp-0x2d0],0x1" c68530fdffff01 -a "mov byte ptr [rbp-0x2cf],0x1" c68531fdffff01 -a "mov byte ptr [rbp-0x2d0],0x1" c68530fdffff01 -a "mov byte ptr [rip+0x205ab2],0x1" c605b25a200001 -a "mov byte ptr [rbp-0x2d2],0x1" c6852efdffff01 -a "mov byte ptr [rip+0x205a32],0x1" c605325a200001 -a "mov word ptr [rbp-0x98],0x6c" 66c78568ffffff6c00 -a "mov qword ptr [rbp-0x1f8],0x0" 48c78508feffff00000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0x248],0x0" 48c785b8fdffff00000000 -a "mov byte ptr [rip+0x205443],0x1" c6054354200001 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x2c4],0x2" c7853cfdffff02000000 -a "mov dword ptr [rbp-0x2e4],0x2" c7851cfdffff02000000 -a "mov qword ptr [rbp-0x158],0x0" 48c785a8feffff00000000 -a "mov qword ptr [rbp-0x148],0x0" 48c785b8feffff00000000 -a "mov dword ptr [rbp-0x2a4],0x7" c7855cfdffff07000000 -a "mov dword ptr [rbp-0x2a4],0x5" c7855cfdffff05000000 -a "mov dword ptr [rbp-0x2c4],0x2" c7853cfdffff02000000 -a "mov qword ptr [rbp-0x120],0x0" 48c785e0feffff00000000 -a "mov qword ptr [rbp-0x1e0],0x0" 48c78520feffff00000000 -a "mov qword ptr [rbp-0x248],0x0" 48c785b8fdffff00000000 -a "mov qword ptr [rbp-0x1d8],0x0" 48c78528feffff00000000 -a "mov dword ptr [rbp-0x2b0],0xffffffff" c78550fdffffffffffff -a "mov dword ptr [rax+0x8],0xffffffff" c74008ffffffff -a "mov dword ptr [rbp-0x2a8],0x0" c78558fdffff00000000 -a "mov qword ptr [rax+0x10],0x0" 48c7401000000000 -a "mov dword ptr [rax+0x8],0xffffffff" c74008ffffffff -a "mov qword ptr [rax+0x10],0x0" 48c7401000000000 -a "mov qword ptr [rbp-0x288],0x0" 48c78578fdffff00000000 -a "mov qword ptr [rbp-0x280],0x0" 48c78580fdffff00000000 -a "mov byte ptr [rip+0x2049a0],0x1" c605a049200001 -a "mov qword ptr [rip+0x20489f],0x0" 48c7059f48200000000000 -a "mov qword ptr [rip+0x2047f9],0x0" 48c705f947200000000000 -a "mov dword ptr [rip+0x2047c7],0x1" c705c747200001000000 -a "mov dword ptr [rip+0x2047b6],0x0" c705b647200000000000 -a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 -a "mov dword ptr [rbp-0x78],0x0" c7458800000000 -a "mov byte ptr [rbp-0x79],0x1" c6458701 -a "mov qword ptr [rbp-0x60],0x1" 48c745a001000000 -a "mov byte ptr [rbp-0x79],0x0" c6458700 -a "mov qword ptr [rbp-0x60],0x1" 48c745a001000000 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov dword ptr [rbp-0x28],0x0" c745d800000000 -a "mov dword ptr [rbp-0x24],0x0" c745dc00000000 -a "mov dword ptr [rbp-0xd8],0x0" c78528ffffff00000000 -a "mov dword ptr [rbp-0xd4],0x0" c7852cffffff00000000 -a "mov dword ptr [rbp-0xd0],0x0" c78530ffffff00000000 -a "mov dword ptr [rbp-0xcc],0x0" c78534ffffff00000000 -a "mov qword ptr [rbp-0x98],0x0" 48c78568ffffff00000000 -a "mov qword ptr [rbp-0x90],0x0" 48c78570ffffff00000000 -a "mov qword ptr [rbp-0x88],0x0" 48c78578ffffff00000000 -a "mov qword ptr [rbp-0x80],0x0" 48c7458000000000 -a "mov qword ptr [rbp-0x78],0x0" 48c7458800000000 -a "mov dword ptr [rbp-0xc8],0xffffffff" c78538ffffffffffffff -a "mov qword ptr [rbp-0x70],0x0" 48c7459000000000 -a "mov qword ptr [rbp-0x68],0x0" 48c7459800000000 -a "mov qword ptr [rbp-0x60],0x0" 48c745a000000000 -a "mov qword ptr [rbp-0x58],0x0" 48c745a800000000 -a "mov dword ptr [rbp-0xc4],0xffffffff" c7853cffffffffffffff -a "mov dword ptr [rbp-0xc0],0x0" c78540ffffff00000000 -a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 -a "mov dword ptr [rbp-0xd8],0x6a" c78528ffffff6a000000 -a "mov dword ptr [rbp-0xd0],0x1" c78530ffffff01000000 -a "mov dword ptr [rbp-0xcc],0x1" c78534ffffff01000000 -a "mov dword ptr [rbp-0xd8],0x1" c78528ffffff01000000 -a "mov dword ptr [rbp-0xd8],0x2" c78528ffffff02000000 -a "mov dword ptr [rip+0x2032e9],0x0" c705e932200000000000 -a "mov dword ptr [rbp-0xc0],0x0" c78540ffffff00000000 -a "mov dword ptr [rbp-0xc0],0x1" c78540ffffff01000000 -a "mov byte ptr [rbp-0xe1],0x0" c6851fffffff00 -a "mov qword ptr [rip+0x202ebe],0x0" 48c705be2e200000000000 -a "mov dword ptr [rbp-0xe0],0x0" c78520ffffff00000000 -a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0xa8],0x1" 48c78558ffffff01000000 -a "mov qword ptr [rip+0x202865],0x0" 48c7056528200000000000 -a "mov dword ptr [rbp-0xe0],0x0" c78520ffffff00000000 -a "mov dword ptr [rbp-0xdc],0x0" c78524ffffff00000000 -a "mov byte ptr [rip+0x2013e0],0x1" c605e013200001 -a "mov byte ptr [rbp-0x2d],0x0" c645d300 -a "mov dword ptr [rbp-0x28],0x0" c745d800000000 -a "mov byte ptr [rbp-0x2d],0x1" c645d301 -a "mov byte ptr [rip+0x201f30],0x1" c605301f200001 -a "mov dword ptr [rbp-0xc],0x0" c745f400000000 -a "mov dword ptr [rax],0x2e2e2e" c7002e2e2e00 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rbp-0x2d],0x0" c645d300 -a "mov byte ptr [rbp-0x2d],0x1" c645d301 -a "mov dword ptr [rip+0x2015f2],0x1" c705f215200001000000 -a "mov byte ptr [rip+0x201606],0x1" c6050616200001 -a "mov dword ptr [rip+0x2015f3],0x1" c705f315200001000000 -a "mov dword ptr [rip+0x20159c],0x7" c7059c15200007000000 -a "mov dword ptr [rip+0x20158d],0x1" c7058d15200001000000 -a "mov dword ptr [rip+0x2015eb],0x0" c705eb15200000000000 -a "mov dword ptr [rip+0x201558],0x0" c7055815200000000000 -a "mov dword ptr [rip+0x2015b6],0x0" c705b615200000000000 -a "mov dword ptr [rip+0x2015b0],0x0" c705b015200000000000 -a "mov dword ptr [rip+0x201519],0x0" c7051915200000000000 -a "mov dword ptr [rip+0x201577],0x0" c7057715200000000000 -a "mov dword ptr [rip+0x201571],0x1" c7057115200001000000 -a "mov dword ptr [rip+0x2014b7],0x0" c705b714200000000000 -a "mov dword ptr [rip+0x201515],0x1" c7051515200001000000 -a "mov dword ptr [rip+0x20150f],0x0" c7050f15200000000000 -a "mov dword ptr [rip+0x2013e2],0x3" c705e213200003000000 -a "mov dword ptr [rip+0x2013fe],0x1" c705fe13200001000000 -a "mov byte ptr [rip+0x204578],0x1" c6057845200001 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov dword ptr [rip+0x203d10],0x1" c705103d200001000000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov dword ptr [rbp-0x164],0x0" c7859cfeffff00000000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov dword ptr [rbp-0x160],0x0" c785a0feffff00000000 -a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 -a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 -a "mov word ptr [rbp-0x3c],0x0" 66c745c40000 -a "mov dword ptr [rbp-0x38],0x0" c745c800000000 -a "mov byte ptr [rbp-0x3d],0x0" c645c300 -a "mov word ptr [rbp-0x3a],0x0" 66c745c60000 -a "mov dword ptr [rbp-0x34],0x0" c745cc00000000 -a "mov byte ptr [rbp-0x3e],0xf9" c645c2f9 -a "mov byte ptr [rbp-0x3e],0xfc" c645c2fc -a "mov byte ptr [rbp-0x3e],0xff" c645c2ff -a "mov dword ptr [rbp-0x2c],0x7fffffff" c745d4ffffff7f -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov byte ptr [rbp-0x2c],0xf7" c645d4f7 -a "mov byte ptr [rbp-0x2c],0xf8" c645d4f8 -a "mov dword ptr [rbp-0x30],0x7fffffff" c745d0ffffff7f -a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 -a "mov byte ptr [rbp-0x2c],0xf8" c645d4f8 -a "mov dword ptr [rbp-0xc],0x2" c745f402000000 -a "mov dword ptr [rbp-0x8],0x0" c745f800000000 -a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 -a "mov dword ptr [rbp-0xc],0xffffffff" c745f4ffffffff -a "mov dword ptr [rbp-0xc],0x2" c745f402000000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov dword ptr [rbp-0x10],0x0" c745f000000000 -a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 -a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 -a "mov dword ptr [rax],0x0" c70000000000 -a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 -a "mov byte ptr [rax],0xa" c6000a -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0x28],0x0" 48c745d800000000 -a "mov dword ptr [rax],0x0" c70000000000 -a "mov qword ptr [rbp-0x28],0x0" 48c745d800000000 -a "mov byte ptr [rax],0xa" c6000a -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0x70],0x0" 48c7459000000000 -a "mov qword ptr [rbp-0x68],0x0" 48c7459800000000 -a "mov qword ptr [rbp-0x80],0x0" 48c7458000000000 -a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 -a "mov dword ptr [rbp-0x98],0x0" c78568ffffff00000000 -a "mov dword ptr [rbp-0x94],0x0" c7856cffffff00000000 -a "mov dword ptr [rbp-0x90],0x0" c78570ffffff00000000 -a "mov dword ptr [rbp-0x8c],0xffffffff" c78574ffffffffffffff -a "mov dword ptr [rip+0x202447],0x42" c7054724200042000000 -a "mov dword ptr [rip+0x2023db],0x0" c705db23200000000000 -a "mov dword ptr [rip+0x202408],0x72" c7050824200072000000 -a "mov dword ptr [rbp-0x94],0x7" c7856cffffff07000000 -a "mov dword ptr [rip+0x2023b3],0x1" c705b323200001000000 -a "mov dword ptr [rbp-0x94],0x6" c7856cffffff06000000 -a "mov dword ptr [rbp-0x94],0x2" c7856cffffff02000000 -a "mov dword ptr [rip+0x20238e],0x1" c7058e23200001000000 -a "mov dword ptr [rbp-0x90],0x1" c78570ffffff01000000 -a "mov dword ptr [rbp-0x98],0x1" c78568ffffff01000000 -a "mov byte ptr [rip+0x202337],0x1" c6053723200001 -a "mov byte ptr [rip+0x20232f],0x0" c6052f23200000 -a "mov dword ptr [rbp-0x94],0x6" c7856cffffff06000000 -a "mov byte ptr [rip+0x202319],0x1" c6051923200001 -a "mov dword ptr [rbp-0x94],0x5" c7856cffffff05000000 -a "mov dword ptr [rbp-0x94],0x4" c7856cffffff04000000 -a "mov dword ptr [rbp-0x94],0x3" c7856cffffff03000000 -a "mov dword ptr [rbp-0x94],0x8" c7856cffffff08000000 -a "mov dword ptr [rip+0x20229f],0x75" c7059f22200075000000 -a "mov dword ptr [rip+0x202293],0x55" c7059322200055000000 -a "mov byte ptr [rip+0x20227f],0x1" c6057f22200001 -a "mov byte ptr [rip+0x202294],0x1" c6059422200001 -a "mov dword ptr [rip+0x202264],0x6a" c705642220006a000000 -a "mov dword ptr [rbp-0x94],0x1" c7856cffffff01000000 -a "mov dword ptr [rbp-0x94],0x0" c7856cffffff00000000 -a "mov dword ptr [rbp-0x88],0x40" c78578ffffff40000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rax+0x24],0x6c" c740246c000000 -a "mov dword ptr [rax+0x24],0x6d" c740246d000000 -a "mov dword ptr [rax+0x24],0x0" c7402400000000 -a "mov byte ptr [rip+0x206cd8],0x1" c605d86c200001 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x64],0x0" c7459c00000000 -a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov qword ptr [rbp-0x48],0x0" 48c745b800000000 -a "mov qword ptr [rbp-0x40],0x0" 48c745c000000000 -a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 -a "mov dword ptr [rbp-0x60],0x0" c745a000000000 -a "mov dword ptr [rbp-0x5c],0x0" c745a400000000 -a "mov byte ptr [rbp-0x65],0x0" c6459b00 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rbp-0x65],0x0" c6459b00 -a "mov byte ptr [rbp-0x65],0x1" c6459b01 -a "mov qword ptr [rax+0x8],0x0" 48c7400800000000 -a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 -a "mov dword ptr [rbp-0x20],0x0" c745e000000000 -a "mov dword ptr [rbp-0x1c],0x0" c745e400000000 -a "mov dword ptr [rbp-0x34],0x20" c745cc20000000 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 -a "mov qword ptr [rbp-0x30],0x0" 48c745d000000000 -a "mov byte ptr [rbp-0x3d],0x1" c645c301 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0x8],0x0" 48c745f800000000 -a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 -a "mov dword ptr [rbp-0x4],0x6a" c745fc6a000000 -a "mov dword ptr [rbp-0x4],0x71" c745fc71000000 -a "mov qword ptr [rbp-0x61920],0x0" 48c785e0e6f9ff00000000 -a "mov dword ptr [rbp-0x61954],0x0" c785ace6f9ff00000000 -a "mov dword ptr [rbp-0x61958],0x0" c785a8e6f9ff00000000 -a "mov dword ptr [rbp-0x61950],0x0" c785b0e6f9ff00000000 -a "mov qword ptr [rbp-0x61918],0x0" 48c785e8e6f9ff00000000 -a "mov qword ptr [rbp-0x61910],0x0" 48c785f0e6f9ff00000000 -a "mov qword ptr [rbp-0x61908],0x0" 48c785f8e6f9ff00000000 -a "mov qword ptr [rbp-0x61900],0x0" 48c78500e7f9ff00000000 -a "mov qword ptr [rbp-0x618f8],0x0" 48c78508e7f9ff00000000 -a "mov qword ptr [rbp-0x618f0],0x0" 48c78510e7f9ff00000000 -a "mov qword ptr [rbp-0x618d0],0x0" 48c78530e7f9ff00000000 -a "mov dword ptr [rbp-0x61938],0x0" c785c8e6f9ff00000000 -a "mov dword ptr [rbp-0x6194c],0x0" c785b4e6f9ff00000000 -a "mov dword ptr [rbp-0x61948],0xffffffff" c785b8e6f9ffffffffff -a "mov dword ptr [rip+0x20531b],0x8" c7051b53200008000000 -a "mov dword ptr [rax+0x190],0x0" c7809001000000000000 -a "mov dword ptr [rip+0x20525c],0x40" c7055c52200040000000 -a "mov dword ptr [rbp-0x6194c],0x2" c785b4e6f9ff02000000 -a "mov dword ptr [rbp-0x6194c],0x1" c785b4e6f9ff01000000 -a "mov dword ptr [rip+0x204e5f],0x1" c7055f4e200001000000 -a "mov dword ptr [rip+0x204d51],0x0" c705514d200000000000 -a "mov dword ptr [rip+0x204d6a],0x1" c7056a4d200001000000 -a "mov dword ptr [rip+0x204cdc],0x0" c705dc4c200000000000 -a "mov qword ptr [rbp-0x618e8],0x0" 48c78518e7f9ff00000000 -a "mov qword ptr [rbp-0x618e0],0x0" 48c78520e7f9ff00000000 -a "mov qword ptr [rbp-0x618e0],0x0" 48c78520e7f9ff00000000 -a "mov qword ptr [rip+0x2049d8],0x0" 48c705d849200000000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0x618d8],0x0" 48c78528e7f9ff00000000 -a "mov qword ptr [rbp-0x61898],0x0" 48c78568e7f9ff00000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0x618d8],0x0" 48c78528e7f9ff00000000 -a "mov dword ptr [rbp-0x61944],0x0" c785bce6f9ff00000000 -a "mov dword ptr [rbp-0x61954],0x20" c785ace6f9ff20000000 -a "mov dword ptr [rbp-0x6193c],0x0" c785c4e6f9ff00000000 -a "mov dword ptr [rbp-0x6193c],0x1" c785c4e6f9ff01000000 -a "mov dword ptr [rbp-0x6194c],0x0" c785b4e6f9ff00000000 -a "mov dword ptr [rax+0x40c],0x0" c7800c04000000000000 -a "mov qword ptr [rbp-0x618c8],0x0" 48c78538e7f9ff00000000 -a "mov byte ptr [rip+0x2037e8],0x1" c605e837200001 -a "mov qword ptr [rbp-0x4a0],0x0" 48c78560fbffff00000000 -a "mov qword ptr [rbp-0x508],0x0" 48c785f8faffff00000000 -a "mov qword ptr [rbp-0x500],0x0" 48c78500fbffff00000000 -a "mov qword ptr [rbp-0x4f8],0x0" 48c78508fbffff00000000 -a "mov qword ptr [rbp-0x4f0],0x0" 48c78510fbffff00000000 -a "mov dword ptr [rbp-0x550],0x0" c785b0faffff00000000 -a "mov dword ptr [rbp-0x54c],0x1" c785b4faffff01000000 -a "mov dword ptr [rbp-0x548],0x0" c785b8faffff00000000 -a "mov dword ptr [rbp-0x544],0x0" c785bcfaffff00000000 -a "mov dword ptr [rbp-0x540],0x0" c785c0faffff00000000 -a "mov dword ptr [rbp-0x53c],0x0" c785c4faffff00000000 -a "mov qword ptr [rbp-0x4d0],0x0" 48c78530fbffff00000000 -a "mov qword ptr [rbp-0x4c8],0x0" 48c78538fbffff00000000 -a "mov qword ptr [rbp-0x4c0],0x0" 48c78540fbffff00000000 -a "mov qword ptr [rbp-0x4b8],0x0" 48c78548fbffff00000000 -a "mov dword ptr [rbp-0x538],0x40" c785c8faffff40000000 -a "mov dword ptr [rbp-0x534],0x0" c785ccfaffff00000000 -a "mov qword ptr [rbp-0x4b0],0x0" 48c78550fbffff00000000 -a "mov dword ptr [rbp-0x530],0x0" c785d0faffff00000000 -a "mov dword ptr [rbp-0x548],0x1" c785b8faffff01000000 -a "mov dword ptr [rbp-0x54c],0x0" c785b4faffff00000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x540],0x1" c785c0faffff01000000 -a "mov dword ptr [rbp-0x540],0x1" c785c0faffff01000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x3a" c6003a -a "mov dword ptr [rbp-0x530],0x1" c785d0faffff01000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x548],0x0" c785b8faffff00000000 -a "mov dword ptr [rbp-0x548],0x0" c785b8faffff00000000 -a "mov dword ptr [rbp-0x548],0x1" c785b8faffff01000000 -a "mov dword ptr [rbp-0x54c],0x0" c785b4faffff00000000 -a "mov dword ptr [rbp-0x544],0x1" c785bcfaffff01000000 -a "mov dword ptr [rbp-0x550],0x1" c785b0faffff01000000 -a "mov dword ptr [rbp-0x53c],0x1" c785c4faffff01000000 -a "mov qword ptr [rbp-0x4d0],0x1" 48c78530fbffff01000000 -a "mov dword ptr [rbp-0x534],0x61" c785ccfaffff61000000 -a "mov dword ptr [rbp-0x534],0x0" c785ccfaffff00000000 -a "mov qword ptr [rbp-0x4f8],0x0" 48c78508fbffff00000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x52c],0x0" c785d4faffff00000000 -a "mov dword ptr [rbp-0x52c],0x0" c785d4faffff00000000 -a "mov byte ptr [rip+0x201148],0x1" c6054811200001 -a "mov dword ptr [rbp-0x5c],0x3" c745a403000000 -a "mov dword ptr [rbp-0x64],0x0" c7459c00000000 -a "mov dword ptr [rbp-0x60],0x0" c745a000000000 -a "mov byte ptr [rbp-0x65],0x1" c6459b01 -a "mov byte ptr [rbp-0x65],0x0" c6459b00 -a "mov dword ptr [rbp-0x60],0x1" c745a001000000 -a "mov dword ptr [rbp-0x64],0x1" c7459c01000000 -a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 -a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 -a "mov byte ptr [rip+0x204568],0x1" c6056845200001 -a "mov dword ptr [rbp-0x210],0x0" c785f0fdffff00000000 -a "mov dword ptr [rbp-0x1d0],0x0" c78530feffff00000000 -a "mov dword ptr [rbp-0x70],0x0" c7459000000000 -a "mov byte ptr [rbp-0x30],0x0" c645d000 -a "mov word ptr [rax],0x3732" 66c7003237 -a "mov byte ptr [rax+0x2],0x0" c6400200 -a "mov word ptr [rax],0x2038" 66c7003820 -a "mov byte ptr [rax+0x2],0x0" c6400200 -a "mov dword ptr [rax],0x203631" c70031362000 -a "mov dword ptr [rax],0x203233" c70033322000 -a "mov dword ptr [rax],0x203436" c70036342000 -a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 -a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 -a "mov qword ptr [rbp-0x338],0x0" 48c785c8fcffff00000000 -a "mov dword ptr [rbp-0x340],0x0" c785c0fcffff00000000 -a "mov qword ptr [rbp-0x330],0x0" 48c785d0fcffff00000000 -a "mov dword ptr [rbp-0x340],0x0" c785c0fcffff00000000 -a "mov dword ptr [rbp-0x2f0],0x0" c78510fdffff00000000 -a "mov dword ptr [rbp-0x320],0x1" c785e0fcffff01000000 -a "mov dword ptr [rbp-0x4],0x1" c745fc01000000 -a "mov dword ptr [rbp-0x4],0x1" c745fc01000000 -a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 -a "mov dword ptr [rbp-0x1c],0x0" c745e400000000 -a "mov dword ptr [rbp-0x18],0x0" c745e800000000 -a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 -a "mov qword ptr [rbp-0x1d8],0x0" 48c78528feffff00000000 -a "mov qword ptr [rbp-0x1d0],0x0" 48c78530feffff00000000 -a "mov qword ptr [rbp-0x1c8],0x0" 48c78538feffff00000000 -a "mov qword ptr [rbp-0x1c0],0x0" 48c78540feffff00000000 -a "mov qword ptr [rbp-0x1b8],0x0" 48c78548feffff00000000 -a "mov byte ptr [rbp-0x215],0x0" c685ebfdffff00 -a "mov byte ptr [rbp-0x214],0x0" c685ecfdffff00 -a "mov byte ptr [rbp-0x213],0x0" c685edfdffff00 -a "mov qword ptr [rbp-0x1b0],0x0" 48c78550feffff00000000 -a "mov dword ptr [rbp-0x20c],0xffffffff" c785f4fdffffffffffff -a "mov dword ptr [rbp-0x208],0x0" c785f8fdffff00000000 -a "mov dword ptr [rbp-0x204],0x0" c785fcfdffff00000000 -a "mov dword ptr [rbp-0x200],0x0" c78500feffff00000000 -a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 -a "mov dword ptr [rbp-0x1f8],0x20" c78508feffff20000000 -a "mov dword ptr [rbp-0x1f4],0x0" c7850cfeffff00000000 -a "mov dword ptr [rbp-0x1f0],0x0" c78510feffff00000000 -a "mov qword ptr [rbp-0x1a8],0x0" 48c78558feffff00000000 -a "mov qword ptr [rbp-0x1a0],0x0" 48c78560feffff00000000 -a "mov qword ptr [rbp-0x198],0x0" 48c78568feffff00000000 -a "mov byte ptr [rbp-0x212],0x0" c685eefdffff00 -a "mov dword ptr [rbp-0x1e8],0x40" c78518feffff40000000 -a "mov byte ptr [rbp-0x212],0x1" c685eefdffff01 -a "mov dword ptr [rbp-0x200],0x1" c78500feffff01000000 -a "mov dword ptr [rip+0x202b89],0x1" c705892b200001000000 -a "mov dword ptr [rbp-0x208],0x1" c785f8fdffff01000000 -a "mov dword ptr [rbp-0x208],0x2" c785f8fdffff02000000 -a "mov byte ptr [rbp-0x215],0x1" c685ebfdffff01 -a "mov dword ptr [rbp-0x208],0x3" c785f8fdffff03000000 -a "mov byte ptr [rip+0x202af2],0x1" c605f22a200001 -a "mov dword ptr [rbp-0x1fc],0x1" c78504feffff01000000 -a "mov byte ptr [rbp-0x213],0x1" c685edfdffff01 -a "mov byte ptr [rip+0x2029f3],0x1" c605f329200001 -a "mov byte ptr [rbp-0x214],0x1" c685ecfdffff01 -a "mov dword ptr [rbp-0x1f4],0x1" c7850cfeffff01000000 -a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 -a "mov dword ptr [rbp-0x204],0x1" c785fcfdffff01000000 -a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 -a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 -a "mov dword ptr [rbp-0x1fc],0x1" c78504feffff01000000 -a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x3a" c6003a -a "mov dword ptr [rbp-0x210],0x0" c785f0fdffff00000000 -a "mov byte ptr [rbp+rax*1-0x120],0x0" c68405e0feffff00 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x1fc],0x1" c78504feffff01000000 -a "mov byte ptr [rbp+rax*1-0x120],0x0" c68405e0feffff00 -a "mov byte ptr [rbp+rax*1-0x120],0x0" c68405e0feffff00 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rip+0x201cd3],0x1" c605d31c200001 -a "mov byte ptr [rip+0x206f90],0x1" c605906f200001 -a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 -a "mov byte ptr [rax+0xc8],0x0" c680c800000000 -a "mov dword ptr [rax+0xb0],0xffffffff" c780b0000000ffffffff -a "mov dword ptr [rax+0x74],0x40" c7407440000000 -a "mov dword ptr [rax+0xbc],0xffffffff" c780bc000000ffffffff -a "mov qword ptr [rax+0x10],0x9c4" 48c74010c4090000 -a "mov dword ptr [rax+0x6c],0x1000" c7406c00100000 -a "mov dword ptr [rax+0xc0],0xa" c780c00000000a000000 -a "mov qword ptr [rax+0x8],0x0" 48c7400800000000 -a "mov qword ptr [rax+0x20],0x1000" 48c7402000100000 -a "mov qword ptr [rax],0x0" 48c70000000000 -a "mov dword ptr [rax+0x60],0x0" c7406000000000 -a "mov dword ptr [rax+0x38],0x0" c7403800000000 -a "mov qword ptr [rax+0x48],0x0" 48c7404800000000 -a "mov qword ptr [rax+0x50],0x1000" 48c7405000100000 -a "mov qword ptr [rax],0x0" 48c70000000000 -a "mov qword ptr [rax+0x18],0x0" 48c7401800000000 -a "mov dword ptr [rax+0xc4],0x0" c780c400000000000000 -a "mov qword ptr [rax+0x40],0x0" 48c7404000000000 -a "mov qword ptr [rax+0x8],0x0" 48c7400800000000 -a "mov qword ptr [rax],0x0" 48c70000000000 -a "mov qword ptr [rax+0x18],0x0" 48c7401800000000 -a "mov dword ptr [rbp-0x8],0x0" c745f800000000 -a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 -a "mov byte ptr [rbp-0xa],0x1" c645f601 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x8],0x0" c745f800000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rax+0x28],0x0" 48c7402800000000 -a "mov byte ptr [rax+0x4],0x0" c6400400 -a "mov byte ptr [rax+0x5],0x0" c6400500 -a "mov dword ptr [rax+0x8],0x1" c7400801000000 -a "mov byte ptr [rbp-0xa],0x0" c645f600 -a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 -a "mov dword ptr [rbp-0x18],0x0" c745e800000000 -a "mov qword ptr [rax+0x48],0x0" 48c7404800000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rax+0x48],0x0" 48c7404800000000 -a "mov dword ptr [rbp-0x2c],0x0" c745d400000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x0" c60000 -a "mov byte ptr [rax],0x24" c60024 -a "mov qword ptr [rax+0x8],0x1" 48c7400801000000 -a "mov byte ptr [rax],0x7d" c6007d -a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 -a "mov dword ptr [rbp-0x14],0x22" c745ec22000000 -a "mov dword ptr [rbp-0x14],0x7e" c745ec7e000000 -a "mov byte ptr [rax],0x2a" c6002a -a "mov byte ptr [rax],0x0" c60000 -a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 -a "mov dword ptr [rax+0xc4],0x1" c780c400000001000000 -a "mov dword ptr [rax+0xc4],0x1" c780c400000001000000 -a "mov dword ptr [rax+0xc4],0x1" c780c400000001000000 -a "mov byte ptr [rbp-0x1],0x0" c645ff00 -a "mov qword ptr [rbp-0x8],0x0" 48c745f800000000 -a "mov qword ptr [rbp-0x8],0x0" 48c745f800000000 -a "mov dword ptr [rbp-0x8],0x0" c745f800000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x1c],0x0" c745e400000000 -a "mov dword ptr [rbp-0x18],0x0" c745e800000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rbp-0x84],0x0" c7857cffffff00000000 -a "mov byte ptr [rax],0x0" c60000 -a "mov dword ptr [rax],0xffffffff" c700ffffffff -a "mov dword ptr [rax],0xffffffff" c700ffffffff -a "mov dword ptr [rax],0xffffffff" c700ffffffff -a "mov dword ptr [esp+0x1c],0xc6670001" 67c744241c010067c6 -a "mov byte ptr [esi],0x86" 67c60686 -a "mov word ptr [esi],0x4020" 6766c7062040 -a "mov word ptr [esi],0x4020" 6766c7062040 -a "mov dword ptr [esi],0x404020" 67c70620404000 -a "mov byte ptr [esp+0x25],0xc0" 67c6442425c0 -a "mov dword ptr [esp+0x20],0x66670014" 67c744242014006766 -a "mov dword ptr [esp+0x1c],0x534d4150" 67c744241c50414d53 -a "mov dword ptr [edx],0x74000000" 67c70200000074 -a "mov dword ptr [eax+eax*1],0xa740000" 67c704000000740a -a "mov dword ptr [esp],0x1" 67c7042401000000 -a "mov dword ptr [esp+0x4],0x0" 67c744240400000000 -a "mov dword ptr [esp+0x4],0x0" 67c744240400000000 -a "mov dword ptr [esi],0xb0003e04" 67c706043e00b0 -a "mov dword ptr [esi],0xb8003e04" 67c706043e00b8 -a "mov word ptr [esi],0x3d04" 6766c706043d -a "mov dword ptr [esp+0xc],0x3" 67c744240c03000000 -a "mov dword ptr [esp+0xc],0x1" 67c744240c01000000 -a "mov word ptr [esp+0x10],0x0" 6766c74424100000 -a "mov word ptr [esp+0x14],0x0" 6766c74424140000 -a "mov dword ptr [esp+0x24],0x66671a00" 67c7442424001a6766 -a "mov word ptr [esi],0x5078" 6766c7067850 -a "mov byte ptr [esi],0x7f" 67c6067f -a "mov dword ptr [esi],0x15078" 67c70678500100 -a "mov word ptr [esi],0x5078" 6766c7067850 -a "mov dword ptr [esp+0x24],0x66670f00" 67c7442424000f6766 -a "mov word ptr [esi],0x5084" 6766c7068450 -a "mov dword ptr [ebp-0x44],0x31660305" 67c745bc05036631 -a "mov dword ptr [ebp-0x4c],0x47534943" 67c745b443495347 -aB "mov rax, qword[r12]" 498b0424 -aB "mov rax, qword[r13]" 498b4500 -aB "mov rsp, qword[r12 - 0x12]" 498b6424ee -aB "mov qword[r12], rsp" 49892424 -aB "mov qword[r8 + 0x20], rax" 49894020 -aB "mov r12, qword[r12]" 4d8b2424 -a "mov eax,r12d" 4489e0 +ad "call r8" 41ffd0 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +ad "call r9" 41ffd1 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +ad "call r10" 41ffd2 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +ad "call r11" 41ffd3 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +ad "call r12" 41ffd4 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +ad "call r13" 41ffd5 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +ad "call r14" 41ffd6 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +ad "call r15" 41ffd7 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +a "mov dword ptr [rax],0x1" c70001000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0x1)) +a "mov qword [rax], 0x1" 48c70001000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 64 0x1)) +a "mov [rax], 0x1" 48c70001000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 64 0x1)) +a "mov byte ptr [rip+0x203cb8],0x1" c605b83c200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x203cb8)) (bv 8 0x1)) +a "mov dword ptr [rip+0x203817],0x42" c7051738200042000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x203817)) (bv 32 0x42)) +a "mov dword ptr [rip+0x20380b],0x54" c7050b38200054000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20380b)) (bv 32 0x54)) +a "mov dword ptr [rip+0x2037ff],0x4f" c705ff3720004f000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2037ff)) (bv 32 0x4f)) +a "mov dword ptr [rip+0x2037f3],0x49" c705f337200049000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2037f3)) (bv 32 0x49)) +a "mov dword ptr [rip+0x2037e7],0x30" c705e737200030000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2037e7)) (bv 32 0x30)) +a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x49)) +a "mov dword ptr [rbp-0x1100],0x0" c78500efffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffef00)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10fc],0x0" c78504efffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffef04)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x49)) +a "mov byte ptr [rbp-0x110a],0x66" c685f6eeffff66 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x66)) +a "mov qword ptr [rbp-0x10b0],0x0" 48c78550efffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffef50)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x10f8],0x0" c78508efffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffef08)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10f8],0x0" c78508efffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffef08)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10d4],0xc" c7852cefffff0c000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffef2c)) (bv 32 0xc)) +a "mov dword ptr [rbp-0x1100],0x0" c78500efffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffef00)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x110a],0x42" c685f6eeffff42 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x42)) +a "mov byte ptr [rbp-0x110a],0x54" c685f6eeffff54 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x54)) +a "mov byte ptr [rbp-0x110a],0x46" c685f6eeffff46 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x46)) +a "mov byte ptr [rax],0x30" c60030 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x30)) +a "mov byte ptr [rbp-0x110a],0x42" c685f6eeffff42 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x42)) +a "mov byte ptr [rax],0x30" c60030 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x30)) +a "mov byte ptr [rbp-0x110a],0x54" c685f6eeffff54 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x54)) +a "mov byte ptr [rax],0x30" c60030 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x30)) +a "mov byte ptr [rbp-0x110a],0x4f" c685f6eeffff4f 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x4f)) +a "mov byte ptr [rax],0x30" c60030 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x30)) +a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x49)) +a "mov byte ptr [rax],0x62" c60062 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x62)) +a "mov byte ptr [rbp-0x110a],0x49" c685f6eeffff49 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffeef6)) (bv 8 0x49)) +a "mov byte ptr [rax],0x74" c60074 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x74)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x10],0xffffffff" c745f0ffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0xffffffff)) +a "mov dword ptr [rbp-0x10],0x1" c745f001000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x4],0x1" c745fc01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x1)) +a "mov byte ptr [rip+0x207200],0x1" c6050072200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x207200)) (bv 8 0x1)) +a "mov dword ptr [rbp-0xc],0x0" c745f400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff4)) (bv 32 0x0)) +a "mov qword ptr [rip+0x2687bd],0x0" 48c705bd87260000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2687bd)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x18c],0x0" c78574feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe74)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x18c],0x1" c78574feffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe74)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x114],0x0" c785ecfeffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffeec)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe8)) (bv 64 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rip+0x2068f4],0x0" 48c705f468200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2068f4)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x31],0x0" c645cf00 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffcf)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x31],0x1" c645cf01 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffcf)) (bv 8 0x1)) +a "mov qword ptr [rbp-0x28],0x0" 48c745d800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x288],0x0" 48c78578fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd78)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x280],0x0" 48c78580fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd80)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x270],0x0" 48c78590fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd90)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x268],0x0" 48c78598fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd98)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x260],0x0" 48c785a0fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffda0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1d0],0x0" 48c78530feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe30)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x2c4],0x0" c7853cfdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd3c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x2c0],0x0" c78540fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd40)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x2bc],0x0" c78544fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd44)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x2d4],0x0" c6852cfdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2c)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x2b8],0x0" c78548fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd48)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x2d3],0x0" c6852dfdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2d)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x2b4],0x0" c7854cfdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd4c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x2b0],0x1" c78550fdffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd50)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x2ac],0x1" c78554fdffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd54)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x2a4],0x5" c7855cfdffff05000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd5c)) (bv 32 0x5)) +a "mov byte ptr [rbp-0x2d2],0x0" c6852efdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2e)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x2d1],0x0" c6852ffdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2f)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x248],0x0" 48c785b8fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdb8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x240],0x0" 48c785c0fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdc0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x230],0x0" 48c785d0fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdd0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x228],0x0" 48c785d8fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdd8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x220],0x0" 48c785e0fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffde0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x218],0x0" 48c785e8fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffde8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x210],0x0" 48c785f0fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x208],0x0" 48c785f8fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf8)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x2d0],0x0" c68530fdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd30)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x2cf],0x0" c68531fdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd31)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x2a0],0x0" c78560fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd60)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x200],0x0" 48c78500feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe00)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x2ce],0x0" c68532fdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd32)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x2b8],0x1" c78548fdffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd48)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x2b8],0x0" c78548fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd48)) (bv 32 0x0)) +a "mov dword ptr [rip+0x267855],0x1" c7055578260001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x267855)) (bv 32 0x1)) +a "mov byte ptr [rbp-0x2ce],0x1" c68532fdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd32)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x2d3],0x1" c6852dfdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2d)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x2d0],0x1" c68530fdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd30)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x2bc],0x1" c78544fdffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd44)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x2c4],0x1" c7853cfdffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd3c)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x2c4],0x2" c7853cfdffff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd3c)) (bv 32 0x2)) +a "mov byte ptr [rbp-0x2d4],0x1" c6852cfdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2c)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x2d1],0x1" c6852ffdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2f)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x2ac],0x0" c78554fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd54)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x2d0],0x1" c68530fdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd30)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x2cf],0x1" c68531fdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd31)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x2d0],0x1" c68530fdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd30)) (bv 8 0x1)) +a "mov byte ptr [rip+0x205ab2],0x1" c605b25a200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x205ab2)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x2d2],0x1" c6852efdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd2e)) (bv 8 0x1)) +a "mov byte ptr [rip+0x205a32],0x1" c605325a200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x205a32)) (bv 8 0x1)) +a "mov word ptr [rbp-0x98],0x6c" 66c78568ffffff6c00 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff68)) (bv 16 0x6c)) +a "mov qword ptr [rbp-0x1f8],0x0" 48c78508feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe08)) (bv 64 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x248],0x0" 48c785b8fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdb8)) (bv 64 0x0)) +a "mov byte ptr [rip+0x205443],0x1" c6054354200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x205443)) (bv 8 0x1)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x2c4],0x2" c7853cfdffff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd3c)) (bv 32 0x2)) +a "mov dword ptr [rbp-0x2e4],0x2" c7851cfdffff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd1c)) (bv 32 0x2)) +a "mov qword ptr [rbp-0x158],0x0" 48c785a8feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffea8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x148],0x0" 48c785b8feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffeb8)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x2a4],0x7" c7855cfdffff07000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd5c)) (bv 32 0x7)) +a "mov dword ptr [rbp-0x2a4],0x5" c7855cfdffff05000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd5c)) (bv 32 0x5)) +a "mov dword ptr [rbp-0x2c4],0x2" c7853cfdffff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd3c)) (bv 32 0x2)) +a "mov qword ptr [rbp-0x120],0x0" 48c785e0feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffee0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1e0],0x0" 48c78520feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe20)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x248],0x0" 48c785b8fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdb8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1d8],0x0" 48c78528feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe28)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x2b0],0xffffffff" c78550fdffffffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd50)) (bv 32 0xffffffff)) +a "mov dword ptr [rax+0x8],0xffffffff" c74008ffffffff 0x0 (storew 0 (+ (var rax) (bv 64 0x8)) (bv 32 0xffffffff)) +a "mov dword ptr [rbp-0x2a8],0x0" c78558fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd58)) (bv 32 0x0)) +a "mov qword ptr [rax+0x10],0x0" 48c7401000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x10)) (bv 64 0x0)) +a "mov dword ptr [rax+0x8],0xffffffff" c74008ffffffff 0x0 (storew 0 (+ (var rax) (bv 64 0x8)) (bv 32 0xffffffff)) +a "mov qword ptr [rax+0x10],0x0" 48c7401000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x10)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x288],0x0" 48c78578fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd78)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x280],0x0" 48c78580fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd80)) (bv 64 0x0)) +a "mov byte ptr [rip+0x2049a0],0x1" c605a049200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2049a0)) (bv 8 0x1)) +a "mov qword ptr [rip+0x20489f],0x0" 48c7059f48200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20489f)) (bv 64 0x0)) +a "mov qword ptr [rip+0x2047f9],0x0" 48c705f947200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2047f9)) (bv 64 0x0)) +a "mov dword ptr [rip+0x2047c7],0x1" c705c747200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2047c7)) (bv 32 0x1)) +a "mov dword ptr [rip+0x2047b6],0x0" c705b647200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2047b6)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x78],0x0" c7458800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff88)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x79],0x1" c6458701 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff87)) (bv 8 0x1)) +a "mov qword ptr [rbp-0x60],0x1" 48c745a001000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa0)) (bv 64 0x1)) +a "mov byte ptr [rbp-0x79],0x0" c6458700 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff87)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x60],0x1" 48c745a001000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa0)) (bv 64 0x1)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x28],0x0" c745d800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x24],0x0" c745dc00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffdc)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xd8],0x0" c78528ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff28)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xd4],0x0" c7852cffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff2c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xd0],0x0" c78530ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff30)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xcc],0x0" c78534ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff34)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x98],0x0" 48c78568ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff68)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x90],0x0" 48c78570ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff70)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x88],0x0" 48c78578ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff78)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x80],0x0" 48c7458000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff80)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x78],0x0" 48c7458800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff88)) (bv 64 0x0)) +a "mov dword ptr [rbp-0xc8],0xffffffff" c78538ffffffffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff38)) (bv 32 0xffffffff)) +a "mov qword ptr [rbp-0x70],0x0" 48c7459000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff90)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x68],0x0" 48c7459800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff98)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x60],0x0" 48c745a000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x58],0x0" 48c745a800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa8)) (bv 64 0x0)) +a "mov dword ptr [rbp-0xc4],0xffffffff" c7853cffffffffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff3c)) (bv 32 0xffffffff)) +a "mov dword ptr [rbp-0xc0],0x0" c78540ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff40)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffb0)) (bv 64 0x0)) +a "mov dword ptr [rbp-0xd8],0x6a" c78528ffffff6a000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff28)) (bv 32 0x6a)) +a "mov dword ptr [rbp-0xd0],0x1" c78530ffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff30)) (bv 32 0x1)) +a "mov dword ptr [rbp-0xcc],0x1" c78534ffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff34)) (bv 32 0x1)) +a "mov dword ptr [rbp-0xd8],0x1" c78528ffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff28)) (bv 32 0x1)) +a "mov dword ptr [rbp-0xd8],0x2" c78528ffffff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff28)) (bv 32 0x2)) +a "mov dword ptr [rip+0x2032e9],0x0" c705e932200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2032e9)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xc0],0x0" c78540ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff40)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xc0],0x1" c78540ffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff40)) (bv 32 0x1)) +a "mov byte ptr [rbp-0xe1],0x0" c6851fffffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff1f)) (bv 8 0x0)) +a "mov qword ptr [rip+0x202ebe],0x0" 48c705be2e200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202ebe)) (bv 64 0x0)) +a "mov dword ptr [rbp-0xe0],0x0" c78520ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff20)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffb0)) (bv 64 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0xa8],0x1" 48c78558ffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff58)) (bv 64 0x1)) +a "mov qword ptr [rip+0x202865],0x0" 48c7056528200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202865)) (bv 64 0x0)) +a "mov dword ptr [rbp-0xe0],0x0" c78520ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff20)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xdc],0x0" c78524ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff24)) (bv 32 0x0)) +a "mov byte ptr [rip+0x2013e0],0x1" c605e013200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2013e0)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x2d],0x0" c645d300 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd3)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x28],0x0" c745d800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd8)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x2d],0x1" c645d301 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd3)) (bv 8 0x1)) +a "mov byte ptr [rip+0x201f30],0x1" c605301f200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201f30)) (bv 8 0x1)) +a "mov dword ptr [rbp-0xc],0x0" c745f400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff4)) (bv 32 0x0)) +a "mov dword ptr [rax],0x2e2e2e" c7002e2e2e00 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0x2e2e2e)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x2d],0x0" c645d300 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd3)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x2d],0x1" c645d301 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd3)) (bv 8 0x1)) +a "mov dword ptr [rip+0x2015f2],0x1" c705f215200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2015f2)) (bv 32 0x1)) +a "mov byte ptr [rip+0x201606],0x1" c6050616200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201606)) (bv 8 0x1)) +a "mov dword ptr [rip+0x2015f3],0x1" c705f315200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2015f3)) (bv 32 0x1)) +a "mov dword ptr [rip+0x20159c],0x7" c7059c15200007000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20159c)) (bv 32 0x7)) +a "mov dword ptr [rip+0x20158d],0x1" c7058d15200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20158d)) (bv 32 0x1)) +a "mov dword ptr [rip+0x2015eb],0x0" c705eb15200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2015eb)) (bv 32 0x0)) +a "mov dword ptr [rip+0x201558],0x0" c7055815200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201558)) (bv 32 0x0)) +a "mov dword ptr [rip+0x2015b6],0x0" c705b615200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2015b6)) (bv 32 0x0)) +a "mov dword ptr [rip+0x2015b0],0x0" c705b015200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2015b0)) (bv 32 0x0)) +a "mov dword ptr [rip+0x201519],0x0" c7051915200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201519)) (bv 32 0x0)) +a "mov dword ptr [rip+0x201577],0x0" c7057715200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201577)) (bv 32 0x0)) +a "mov dword ptr [rip+0x201571],0x1" c7057115200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201571)) (bv 32 0x1)) +a "mov dword ptr [rip+0x2014b7],0x0" c705b714200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2014b7)) (bv 32 0x0)) +a "mov dword ptr [rip+0x201515],0x1" c7051515200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201515)) (bv 32 0x1)) +a "mov dword ptr [rip+0x20150f],0x0" c7050f15200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20150f)) (bv 32 0x0)) +a "mov dword ptr [rip+0x2013e2],0x3" c705e213200003000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2013e2)) (bv 32 0x3)) +a "mov dword ptr [rip+0x2013fe],0x1" c705fe13200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2013fe)) (bv 32 0x1)) +a "mov byte ptr [rip+0x204578],0x1" c6057845200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x204578)) (bv 8 0x1)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov dword ptr [rip+0x203d10],0x1" c705103d200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x203d10)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x164],0x0" c7859cfeffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe9c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x160],0x0" c785a0feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffea0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x168],0x0" c78598feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe98)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 64 0x0)) +a "mov word ptr [rbp-0x3c],0x0" 66c745c40000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc4)) (bv 16 0x0)) +a "mov dword ptr [rbp-0x38],0x0" c745c800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc8)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x3d],0x0" c645c300 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc3)) (bv 8 0x0)) +a "mov word ptr [rbp-0x3a],0x0" 66c745c60000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc6)) (bv 16 0x0)) +a "mov dword ptr [rbp-0x34],0x0" c745cc00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffcc)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x3e],0xf9" c645c2f9 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc2)) (bv 8 0xf9)) +a "mov byte ptr [rbp-0x3e],0xfc" c645c2fc 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc2)) (bv 8 0xfc)) +a "mov byte ptr [rbp-0x3e],0xff" c645c2ff 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc2)) (bv 8 0xff)) +a "mov dword ptr [rbp-0x2c],0x7fffffff" c745d4ffffff7f 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd4)) (bv 32 0x7fffffff)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x2c],0xf7" c645d4f7 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd4)) (bv 8 0xf7)) +a "mov byte ptr [rbp-0x2c],0xf8" c645d4f8 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd4)) (bv 8 0xf8)) +a "mov dword ptr [rbp-0x30],0x7fffffff" c745d0ffffff7f 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd0)) (bv 32 0x7fffffff)) +a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe8)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x2c],0xf8" c645d4f8 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd4)) (bv 8 0xf8)) +a "mov dword ptr [rbp-0xc],0x2" c745f402000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff4)) (bv 32 0x2)) +a "mov dword ptr [rbp-0x8],0x0" c745f800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffec)) (bv 32 0x0)) +a "mov dword ptr [rbp-0xc],0xffffffff" c745f4ffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff4)) (bv 32 0xffffffff)) +a "mov dword ptr [rbp-0xc],0x2" c745f402000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff4)) (bv 32 0x2)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x10],0x0" c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffec)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffec)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc8)) (bv 64 0x0)) +a "mov dword ptr [rax],0x0" c70000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc8)) (bv 64 0x0)) +a "mov byte ptr [rax],0xa" c6000a 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0xa)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x28],0x0" 48c745d800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd8)) (bv 64 0x0)) +a "mov dword ptr [rax],0x0" c70000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x28],0x0" 48c745d800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd8)) (bv 64 0x0)) +a "mov byte ptr [rax],0xa" c6000a 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0xa)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x70],0x0" 48c7459000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff90)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x68],0x0" 48c7459800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff98)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x80],0x0" 48c7458000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff80)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffb0)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x98],0x0" c78568ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff68)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x94],0x0" c7856cffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x90],0x0" c78570ffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff70)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x8c],0xffffffff" c78574ffffffffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff74)) (bv 32 0xffffffff)) +a "mov dword ptr [rip+0x202447],0x42" c7054724200042000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202447)) (bv 32 0x42)) +a "mov dword ptr [rip+0x2023db],0x0" c705db23200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2023db)) (bv 32 0x0)) +a "mov dword ptr [rip+0x202408],0x72" c7050824200072000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202408)) (bv 32 0x72)) +a "mov dword ptr [rbp-0x94],0x7" c7856cffffff07000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x7)) +a "mov dword ptr [rip+0x2023b3],0x1" c705b323200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2023b3)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x94],0x6" c7856cffffff06000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x6)) +a "mov dword ptr [rbp-0x94],0x2" c7856cffffff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x2)) +a "mov dword ptr [rip+0x20238e],0x1" c7058e23200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20238e)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x90],0x1" c78570ffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff70)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x98],0x1" c78568ffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff68)) (bv 32 0x1)) +a "mov byte ptr [rip+0x202337],0x1" c6053723200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202337)) (bv 8 0x1)) +a "mov byte ptr [rip+0x20232f],0x0" c6052f23200000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20232f)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x94],0x6" c7856cffffff06000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x6)) +a "mov byte ptr [rip+0x202319],0x1" c6051923200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202319)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x94],0x5" c7856cffffff05000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x5)) +a "mov dword ptr [rbp-0x94],0x4" c7856cffffff04000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x4)) +a "mov dword ptr [rbp-0x94],0x3" c7856cffffff03000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x3)) +a "mov dword ptr [rbp-0x94],0x8" c7856cffffff08000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x8)) +a "mov dword ptr [rip+0x20229f],0x75" c7059f22200075000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20229f)) (bv 32 0x75)) +a "mov dword ptr [rip+0x202293],0x55" c7059322200055000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202293)) (bv 32 0x55)) +a "mov byte ptr [rip+0x20227f],0x1" c6057f22200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20227f)) (bv 8 0x1)) +a "mov byte ptr [rip+0x202294],0x1" c6059422200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202294)) (bv 8 0x1)) +a "mov dword ptr [rip+0x202264],0x6a" c705642220006a000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202264)) (bv 32 0x6a)) +a "mov dword ptr [rbp-0x94],0x1" c7856cffffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x94],0x0" c7856cffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff6c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x88],0x40" c78578ffffff40000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff78)) (bv 32 0x40)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rax+0x24],0x6c" c740246c000000 0x0 (storew 0 (+ (var rax) (bv 64 0x24)) (bv 32 0x6c)) +a "mov dword ptr [rax+0x24],0x6d" c740246d000000 0x0 (storew 0 (+ (var rax) (bv 64 0x24)) (bv 32 0x6d)) +a "mov dword ptr [rax+0x24],0x0" c7402400000000 0x0 (storew 0 (+ (var rax) (bv 64 0x24)) (bv 32 0x0)) +a "mov byte ptr [rip+0x206cd8],0x1" c605d86c200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x206cd8)) (bv 8 0x1)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x64],0x0" c7459c00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9c)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x50],0x0" 48c745b000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffb0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x48],0x0" 48c745b800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffb8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x40],0x0" 48c745c000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc8)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x60],0x0" c745a000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x5c],0x0" c745a400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa4)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x65],0x0" c6459b00 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9b)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x65],0x0" c6459b00 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9b)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x65],0x1" c6459b01 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9b)) (bv 8 0x1)) +a "mov qword ptr [rax+0x8],0x0" 48c7400800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x20],0x0" c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1c],0x0" c745e400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe4)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x34],0x20" c745cc20000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffcc)) (bv 32 0x20)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x30],0x0" 48c745d000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd0)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x3d],0x1" c645c301 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc3)) (bv 8 0x1)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x8],0x0" 48c745f800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff8)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x4],0x6a" c745fc6a000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x6a)) +a "mov dword ptr [rbp-0x4],0x71" c745fc71000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x71)) +a "mov qword ptr [rbp-0x61920],0x0" 48c785e0e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6e0)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x61954],0x0" c785ace6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6ac)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x61958],0x0" c785a8e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6a8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x61950],0x0" c785b0e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6b0)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x61918],0x0" 48c785e8e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6e8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x61910],0x0" 48c785f0e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6f0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x61908],0x0" 48c785f8e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6f8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x61900],0x0" 48c78500e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e700)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x618f8],0x0" 48c78508e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e708)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x618f0],0x0" 48c78510e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e710)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x618d0],0x0" 48c78530e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e730)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x61938],0x0" c785c8e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6c8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x6194c],0x0" c785b4e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6b4)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x61948],0xffffffff" c785b8e6f9ffffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6b8)) (bv 32 0xffffffff)) +a "mov dword ptr [rip+0x20531b],0x8" c7051b53200008000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20531b)) (bv 32 0x8)) +a "mov dword ptr [rax+0x190],0x0" c7809001000000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x190)) (bv 32 0x0)) +a "mov dword ptr [rip+0x20525c],0x40" c7055c52200040000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x20525c)) (bv 32 0x40)) +a "mov dword ptr [rbp-0x6194c],0x2" c785b4e6f9ff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6b4)) (bv 32 0x2)) +a "mov dword ptr [rbp-0x6194c],0x1" c785b4e6f9ff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6b4)) (bv 32 0x1)) +a "mov dword ptr [rip+0x204e5f],0x1" c7055f4e200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x204e5f)) (bv 32 0x1)) +a "mov dword ptr [rip+0x204d51],0x0" c705514d200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x204d51)) (bv 32 0x0)) +a "mov dword ptr [rip+0x204d6a],0x1" c7056a4d200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x204d6a)) (bv 32 0x1)) +a "mov dword ptr [rip+0x204cdc],0x0" c705dc4c200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x204cdc)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x618e8],0x0" 48c78518e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e718)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x618e0],0x0" 48c78520e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e720)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x618e0],0x0" 48c78520e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e720)) (bv 64 0x0)) +a "mov qword ptr [rip+0x2049d8],0x0" 48c705d849200000000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2049d8)) (bv 64 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x618d8],0x0" 48c78528e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e728)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x61898],0x0" 48c78568e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e768)) (bv 64 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x618d8],0x0" 48c78528e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e728)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x61944],0x0" c785bce6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6bc)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x61954],0x20" c785ace6f9ff20000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6ac)) (bv 32 0x20)) +a "mov dword ptr [rbp-0x6193c],0x0" c785c4e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6c4)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x6193c],0x1" c785c4e6f9ff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6c4)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x6194c],0x0" c785b4e6f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e6b4)) (bv 32 0x0)) +a "mov dword ptr [rax+0x40c],0x0" c7800c04000000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x40c)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x618c8],0x0" 48c78538e7f9ff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffff9e738)) (bv 64 0x0)) +a "mov byte ptr [rip+0x2037e8],0x1" c605e837200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2037e8)) (bv 8 0x1)) +a "mov qword ptr [rbp-0x4a0],0x0" 48c78560fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb60)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x508],0x0" 48c785f8faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffaf8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x500],0x0" 48c78500fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb00)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x4f8],0x0" 48c78508fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb08)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x4f0],0x0" 48c78510fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb10)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x550],0x0" c785b0faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x54c],0x1" c785b4faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab4)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x548],0x0" c785b8faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x544],0x0" c785bcfaffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffabc)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x540],0x0" c785c0faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffac0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x53c],0x0" c785c4faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffac4)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x4d0],0x0" 48c78530fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb30)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x4c8],0x0" 48c78538fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb38)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x4c0],0x0" 48c78540fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb40)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x4b8],0x0" 48c78548fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb48)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x538],0x40" c785c8faffff40000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffac8)) (bv 32 0x40)) +a "mov dword ptr [rbp-0x534],0x0" c785ccfaffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffacc)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x4b0],0x0" 48c78550fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb50)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x530],0x0" c785d0faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffad0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x548],0x1" c785b8faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab8)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x54c],0x0" c785b4faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab4)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x540],0x1" c785c0faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffac0)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x540],0x1" c785c0faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffac0)) (bv 32 0x1)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x3a" c6003a 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x3a)) +a "mov dword ptr [rbp-0x530],0x1" c785d0faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffad0)) (bv 32 0x1)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x548],0x0" c785b8faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x548],0x0" c785b8faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x548],0x1" c785b8faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab8)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x54c],0x0" c785b4faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab4)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x544],0x1" c785bcfaffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffabc)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x550],0x1" c785b0faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffab0)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x53c],0x1" c785c4faffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffac4)) (bv 32 0x1)) +a "mov qword ptr [rbp-0x4d0],0x1" 48c78530fbffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb30)) (bv 64 0x1)) +a "mov dword ptr [rbp-0x534],0x61" c785ccfaffff61000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffacc)) (bv 32 0x61)) +a "mov dword ptr [rbp-0x534],0x0" c785ccfaffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffacc)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x4f8],0x0" 48c78508fbffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffb08)) (bv 64 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x52c],0x0" c785d4faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffad4)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x52c],0x0" c785d4faffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffad4)) (bv 32 0x0)) +a "mov byte ptr [rip+0x201148],0x1" c6054811200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201148)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x5c],0x3" c745a403000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa4)) (bv 32 0x3)) +a "mov dword ptr [rbp-0x64],0x0" c7459c00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x60],0x0" c745a000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa0)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x65],0x1" c6459b01 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9b)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x65],0x0" c6459b00 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9b)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x60],0x1" c745a001000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffa0)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x64],0x1" c7459c01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff9c)) (bv 32 0x1)) +a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x38],0x0" 48c745c800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffc8)) (bv 64 0x0)) +a "mov byte ptr [rip+0x204568],0x1" c6056845200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x204568)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x210],0x0" c785f0fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1d0],0x0" c78530feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe30)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x70],0x0" c7459000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff90)) (bv 32 0x0)) +a "mov byte ptr [rbp-0x30],0x0" c645d000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd0)) (bv 8 0x0)) +a "mov word ptr [rax],0x3732" 66c7003237 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 16 0x3732)) +a "mov byte ptr [rax+0x2],0x0" c6400200 0x0 (storew 0 (+ (var rax) (bv 64 0x2)) (bv 8 0x0)) +a "mov word ptr [rax],0x2038" 66c7003820 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 16 0x2038)) +a "mov byte ptr [rax+0x2],0x0" c6400200 0x0 (storew 0 (+ (var rax) (bv 64 0x2)) (bv 8 0x0)) +a "mov dword ptr [rax],0x203631" c70031362000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0x203631)) +a "mov dword ptr [rax],0x203233" c70033322000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0x203233)) +a "mov dword ptr [rax],0x203436" c70036342000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0x203436)) +a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x338],0x0" 48c785c8fcffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffcc8)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x340],0x0" c785c0fcffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffcc0)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x330],0x0" 48c785d0fcffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffcd0)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x340],0x0" c785c0fcffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffcc0)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x2f0],0x0" c78510fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffd10)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x320],0x1" c785e0fcffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffce0)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x4],0x1" c745fc01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x4],0x1" c745fc01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffec)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1c],0x0" c745e400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe4)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x18],0x0" c745e800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x1d8],0x0" 48c78528feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe28)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1d0],0x0" 48c78530feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe30)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1c8],0x0" 48c78538feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe38)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1c0],0x0" 48c78540feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe40)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1b8],0x0" 48c78548feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe48)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x215],0x0" c685ebfdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdeb)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x214],0x0" c685ecfdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdec)) (bv 8 0x0)) +a "mov byte ptr [rbp-0x213],0x0" c685edfdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffded)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x1b0],0x0" 48c78550feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe50)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x20c],0xffffffff" c785f4fdffffffffffff 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf4)) (bv 32 0xffffffff)) +a "mov dword ptr [rbp-0x208],0x0" c785f8fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x204],0x0" c785fcfdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdfc)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x200],0x0" c78500feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe00)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1f8],0x20" c78508feffff20000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe08)) (bv 32 0x20)) +a "mov dword ptr [rbp-0x1f4],0x0" c7850cfeffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe0c)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1f0],0x0" c78510feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe10)) (bv 32 0x0)) +a "mov qword ptr [rbp-0x1a8],0x0" 48c78558feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe58)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x1a0],0x0" 48c78560feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe60)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x198],0x0" 48c78568feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe68)) (bv 64 0x0)) +a "mov byte ptr [rbp-0x212],0x0" c685eefdffff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdee)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x1e8],0x40" c78518feffff40000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe18)) (bv 32 0x40)) +a "mov byte ptr [rbp-0x212],0x1" c685eefdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdee)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x200],0x1" c78500feffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe00)) (bv 32 0x1)) +a "mov dword ptr [rip+0x202b89],0x1" c705892b200001000000 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202b89)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x208],0x1" c785f8fdffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf8)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x208],0x2" c785f8fdffff02000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf8)) (bv 32 0x2)) +a "mov byte ptr [rbp-0x215],0x1" c685ebfdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdeb)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x208],0x3" c785f8fdffff03000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf8)) (bv 32 0x3)) +a "mov byte ptr [rip+0x202af2],0x1" c605f22a200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x202af2)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x1fc],0x1" c78504feffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x1)) +a "mov byte ptr [rbp-0x213],0x1" c685edfdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffded)) (bv 8 0x1)) +a "mov byte ptr [rip+0x2029f3],0x1" c605f329200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x2029f3)) (bv 8 0x1)) +a "mov byte ptr [rbp-0x214],0x1" c685ecfdffff01 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdec)) (bv 8 0x1)) +a "mov dword ptr [rbp-0x1f4],0x1" c7850cfeffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe0c)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x204],0x1" c785fcfdffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdfc)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x1fc],0x1" c78504feffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x1)) +a "mov dword ptr [rbp-0x1fc],0x0" c78504feffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x3a" c6003a 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x3a)) +a "mov dword ptr [rbp-0x210],0x0" c785f0fdffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffdf0)) (bv 32 0x0)) +a "mov byte ptr [rbp+rax*1-0x120],0x0" c68405e0feffff00 0x0 (storew 0 (+ (+ (var rbp) (* (var rax) (bv 64 0x1))) (bv 64 0xfffffffffffffee0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x1fc],0x1" c78504feffff01000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffe04)) (bv 32 0x1)) +a "mov byte ptr [rbp+rax*1-0x120],0x0" c68405e0feffff00 0x0 (storew 0 (+ (+ (var rbp) (* (var rax) (bv 64 0x1))) (bv 64 0xfffffffffffffee0)) (bv 8 0x0)) +a "mov byte ptr [rbp+rax*1-0x120],0x0" c68405e0feffff00 0x0 (storew 0 (+ (+ (var rbp) (* (var rax) (bv 64 0x1))) (bv 64 0xfffffffffffffee0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rip+0x201cd3],0x1" c605d31c200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x201cd3)) (bv 8 0x1)) +a "mov byte ptr [rip+0x206f90],0x1" c605906f200001 0x0 (storew 0 (+ (bv 64 0x0) (bv 64 0x206f90)) (bv 8 0x1)) +a "mov qword ptr [rbp-0x10],0x0" 48c745f000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff0)) (bv 64 0x0)) +a "mov byte ptr [rax+0xc8],0x0" c680c800000000 0x0 (storew 0 (+ (var rax) (bv 64 0xc8)) (bv 8 0x0)) +a "mov dword ptr [rax+0xb0],0xffffffff" c780b0000000ffffffff 0x0 (storew 0 (+ (var rax) (bv 64 0xb0)) (bv 32 0xffffffff)) +a "mov dword ptr [rax+0x74],0x40" c7407440000000 0x0 (storew 0 (+ (var rax) (bv 64 0x74)) (bv 32 0x40)) +a "mov dword ptr [rax+0xbc],0xffffffff" c780bc000000ffffffff 0x0 (storew 0 (+ (var rax) (bv 64 0xbc)) (bv 32 0xffffffff)) +a "mov qword ptr [rax+0x10],0x9c4" 48c74010c4090000 0x0 (storew 0 (+ (var rax) (bv 64 0x10)) (bv 64 0x9c4)) +a "mov dword ptr [rax+0x6c],0x1000" c7406c00100000 0x0 (storew 0 (+ (var rax) (bv 64 0x6c)) (bv 32 0x1000)) +a "mov dword ptr [rax+0xc0],0xa" c780c00000000a000000 0x0 (storew 0 (+ (var rax) (bv 64 0xc0)) (bv 32 0xa)) +a "mov qword ptr [rax+0x8],0x0" 48c7400800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x8)) (bv 64 0x0)) +a "mov qword ptr [rax+0x20],0x1000" 48c7402000100000 0x0 (storew 0 (+ (var rax) (bv 64 0x20)) (bv 64 0x1000)) +a "mov qword ptr [rax],0x0" 48c70000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 64 0x0)) +a "mov dword ptr [rax+0x60],0x0" c7406000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x60)) (bv 32 0x0)) +a "mov dword ptr [rax+0x38],0x0" c7403800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x38)) (bv 32 0x0)) +a "mov qword ptr [rax+0x48],0x0" 48c7404800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x48)) (bv 64 0x0)) +a "mov qword ptr [rax+0x50],0x1000" 48c7405000100000 0x0 (storew 0 (+ (var rax) (bv 64 0x50)) (bv 64 0x1000)) +a "mov qword ptr [rax],0x0" 48c70000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 64 0x0)) +a "mov qword ptr [rax+0x18],0x0" 48c7401800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x18)) (bv 64 0x0)) +a "mov dword ptr [rax+0xc4],0x0" c780c400000000000000 0x0 (storew 0 (+ (var rax) (bv 64 0xc4)) (bv 32 0x0)) +a "mov qword ptr [rax+0x40],0x0" 48c7404000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x40)) (bv 64 0x0)) +a "mov qword ptr [rax+0x8],0x0" 48c7400800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x8)) (bv 64 0x0)) +a "mov qword ptr [rax],0x0" 48c70000000000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 64 0x0)) +a "mov qword ptr [rax+0x18],0x0" 48c7401800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x18)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x8],0x0" c745f800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff8)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x4],0x0" c745fc00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffffc)) (bv 32 0x0)) +a "mov byte ptr [rbp-0xa],0x1" c645f601 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff6)) (bv 8 0x1)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x8],0x0" c745f800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff8)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rax+0x28],0x0" 48c7402800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x28)) (bv 64 0x0)) +a "mov byte ptr [rax+0x4],0x0" c6400400 0x0 (storew 0 (+ (var rax) (bv 64 0x4)) (bv 8 0x0)) +a "mov byte ptr [rax+0x5],0x0" c6400500 0x0 (storew 0 (+ (var rax) (bv 64 0x5)) (bv 8 0x0)) +a "mov dword ptr [rax+0x8],0x1" c7400801000000 0x0 (storew 0 (+ (var rax) (bv 64 0x8)) (bv 32 0x1)) +a "mov byte ptr [rbp-0xa],0x0" c645f600 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff6)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x20],0x0" 48c745e000000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe0)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x18],0x0" c745e800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe8)) (bv 32 0x0)) +a "mov qword ptr [rax+0x48],0x0" 48c7404800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x48)) (bv 64 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rax+0x48],0x0" 48c7404800000000 0x0 (storew 0 (+ (var rax) (bv 64 0x48)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x2c],0x0" c745d400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffd4)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov byte ptr [rax],0x24" c60024 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x24)) +a "mov qword ptr [rax+0x8],0x1" 48c7400801000000 0x0 (storew 0 (+ (var rax) (bv 64 0x8)) (bv 64 0x1)) +a "mov byte ptr [rax],0x7d" c6007d 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x7d)) +a "mov dword ptr [rbp-0x14],0x0" c745ec00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffec)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x14],0x22" c745ec22000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffec)) (bv 32 0x22)) +a "mov dword ptr [rbp-0x14],0x7e" c745ec7e000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffec)) (bv 32 0x7e)) +a "mov byte ptr [rax],0x2a" c6002a 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x2a)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x18],0x0" 48c745e800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe8)) (bv 64 0x0)) +a "mov dword ptr [rax+0xc4],0x1" c780c400000001000000 0x0 (storew 0 (+ (var rax) (bv 64 0xc4)) (bv 32 0x1)) +a "mov dword ptr [rax+0xc4],0x1" c780c400000001000000 0x0 (storew 0 (+ (var rax) (bv 64 0xc4)) (bv 32 0x1)) +a "mov dword ptr [rax+0xc4],0x1" c780c400000001000000 0x0 (storew 0 (+ (var rax) (bv 64 0xc4)) (bv 32 0x1)) +a "mov byte ptr [rbp-0x1],0x0" c645ff00 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffff)) (bv 8 0x0)) +a "mov qword ptr [rbp-0x8],0x0" 48c745f800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff8)) (bv 64 0x0)) +a "mov qword ptr [rbp-0x8],0x0" 48c745f800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff8)) (bv 64 0x0)) +a "mov dword ptr [rbp-0x8],0x0" c745f800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xfffffffffffffff8)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x1c],0x0" c745e400000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe4)) (bv 32 0x0)) +a "mov dword ptr [rbp-0x18],0x0" c745e800000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffffe8)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rbp-0x84],0x0" c7857cffffff00000000 0x0 (storew 0 (+ (var rbp) (bv 64 0xffffffffffffff7c)) (bv 32 0x0)) +a "mov byte ptr [rax],0x0" c60000 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 8 0x0)) +a "mov dword ptr [rax],0xffffffff" c700ffffffff 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0xffffffff)) +a "mov dword ptr [rax],0xffffffff" c700ffffffff 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0xffffffff)) +a "mov dword ptr [rax],0xffffffff" c700ffffffff 0x0 (storew 0 (+ (var rax) (bv 64 0x0)) (bv 32 0xffffffff)) +a "mov dword ptr [esp+0x1c],0xc6670001" 67c744241c010067c6 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x1c)) (bv 32 0xc6670001)) +a "mov byte ptr [esi],0x86" 67c60686 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 8 0x86)) +a "mov word ptr [esi],0x4020" 6766c7062040 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 16 0x4020)) +a "mov word ptr [esi],0x4020" 6766c7062040 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 16 0x4020)) +a "mov dword ptr [esi],0x404020" 67c70620404000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 32 0x404020)) +a "mov byte ptr [esp+0x25],0xc0" 67c6442425c0 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x25)) (bv 8 0xc0)) +a "mov dword ptr [esp+0x20],0x66670014" 67c744242014006766 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x20)) (bv 32 0x66670014)) +a "mov dword ptr [esp+0x1c],0x534d4150" 67c744241c50414d53 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x1c)) (bv 32 0x534d4150)) +a "mov dword ptr [edx],0x74000000" 67c70200000074 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rdx))) (bv 64 0x0)) (bv 32 0x74000000)) +a "mov dword ptr [eax+eax*1],0xa740000" 67c704000000740a 0x0 (storew 0 (+ (+ (cast 64 false (cast 32 false (var rax))) (* (cast 64 false (cast 32 false (var rax))) (bv 64 0x1))) (bv 64 0x0)) (bv 32 0xa740000)) +a "mov dword ptr [esp],0x1" 67c7042401000000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x0)) (bv 32 0x1)) +a "mov dword ptr [esp+0x4],0x0" 67c744240400000000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x4)) (bv 32 0x0)) +a "mov dword ptr [esp+0x4],0x0" 67c744240400000000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x4)) (bv 32 0x0)) +a "mov dword ptr [esi],0xb0003e04" 67c706043e00b0 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 32 0xb0003e04)) +a "mov dword ptr [esi],0xb8003e04" 67c706043e00b8 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 32 0xb8003e04)) +a "mov word ptr [esi],0x3d04" 6766c706043d 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 16 0x3d04)) +a "mov dword ptr [esp+0xc],0x3" 67c744240c03000000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0xc)) (bv 32 0x3)) +a "mov dword ptr [esp+0xc],0x1" 67c744240c01000000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0xc)) (bv 32 0x1)) +a "mov word ptr [esp+0x10],0x0" 6766c74424100000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x10)) (bv 16 0x0)) +a "mov word ptr [esp+0x14],0x0" 6766c74424140000 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x14)) (bv 16 0x0)) +a "mov dword ptr [esp+0x24],0x66671a00" 67c7442424001a6766 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x24)) (bv 32 0x66671a00)) +a "mov word ptr [esi],0x5078" 6766c7067850 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 16 0x5078)) +a "mov byte ptr [esi],0x7f" 67c6067f 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 8 0x7f)) +a "mov dword ptr [esi],0x15078" 67c70678500100 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 32 0x15078)) +a "mov word ptr [esi],0x5078" 6766c7067850 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 16 0x5078)) +a "mov dword ptr [esp+0x24],0x66670f00" 67c7442424000f6766 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsp))) (bv 64 0x24)) (bv 32 0x66670f00)) +a "mov word ptr [esi],0x5084" 6766c7068450 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rsi))) (bv 64 0x0)) (bv 16 0x5084)) +a "mov dword ptr [ebp-0x44],0x31660305" 67c745bc05036631 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rbp))) (bv 64 0xffffffffffffffbc)) (bv 32 0x31660305)) +a "mov dword ptr [ebp-0x4c],0x47534943" 67c745b443495347 0x0 (storew 0 (+ (cast 64 false (cast 32 false (var rbp))) (bv 64 0xffffffffffffffb4)) (bv 32 0x47534943)) +aB "mov rax, qword[r12]" 498b0424 0x0 hjh +aB "mov rax, qword[r13]" 498b4500 0x0 hjh +aB "mov rsp, qword[r12 - 0x12]" 498b6424ee 0x0 hjh +aB "mov qword[r12], rsp" 49892424 0x0 hjh +aB "mov qword[r8 + 0x20], rax" 49894020 0x0 hjh +aB "mov r12, qword[r12]" 4d8b2424 0x0 hjh +a "mov eax,r12d" 4489e0 0x0 (set rax (| (& (var rax) (~ (bv 64 0xffffffff))) (cast 64 false (cast 32 false (var r12))))) ad "movabs r12, 1" 49bc0100000000000000 -a "inc al" fec0 -a "inc BYTE PTR [r12]" 41fe0424 -a "inc BYTE PTR [rbx+0x18]" fe4318 -a "inc BYTE PTR [rdi+0x18]" fe4718 -a "inc BYTE PTR [rsi+0x1a]" fe461a -a "inc cl" fec1 -a "inc dl" fec2 -a "inc DWORD PTR [r12]" 41ff0424 -a "inc DWORD PTR [r12+0x28]" 41ff442428 -a "inc DWORD PTR [r13+0x70]" 41ff4570 -a "inc DWORD PTR [r14]" 41ff06 -a "inc DWORD PTR [r14+0x134]" 41ff8634010000 -a "inc DWORD PTR [r15]" 41ff07 -a "inc DWORD PTR [r15+0x88]" 41ff8788000000 -a "inc DWORD PTR [rax]" ff00 -a "inc DWORD PTR [rax+0x14c]" ff804c010000 -a "inc DWORD PTR [rax+rdx*1]" ff0410 -a "inc DWORD PTR [rax+rdx*1+0x109]" ff841009010000 -a "inc DWORD PTR [rbp+0x10]" ff4510 -a "inc DWORD PTR [rbx]" ff03 -a "inc DWORD PTR [rbx+0x18]" ff4318 -a "inc DWORD PTR [rbx+0x20]" ff4320 -a "inc DWORD PTR [rcx]" ff01 -a "inc DWORD PTR [rcx+0x4]" ff4104 -a "inc DWORD PTR [rdi]" ff07 -a "inc DWORD PTR [rdi+0x28]" ff4728 -a "inc DWORD PTR [rdx]" ff02 -a "inc DWORD PTR [rdx+0x10]" ff4210 -a "inc DWORD PTR [rdx+rax*1]" ff0402 -a "inc DWORD PTR [rip+0x2009c8]" ff05c8092000 -a "inc DWORD PTR [rsi+0x8]" ff4608 -a "inc DWORD PTR [rsp]" ff0424 -a "inc DWORD PTR [rsp+0x10]" ff442410 -a "inc DWORD PTR [rsp+rax*4+0x400]" ff848400040000 -a "inc DWORD PTR [rsp+rbp*4+0x2b8]" ff84acb8020000 -a "inc eax" ffc0 -a "inc ebp" ffc5 -a "inc ebx" ffc3 -a "inc ecx" ffc1 -a "inc edi" ffc7 -a "inc edx" ffc2 -a "inc QWORD PTR [r10]" 49ff02 -a "inc QWORD PTR [r10+rax*1]" 49ff0402 -a "inc QWORD PTR [r11]" 49ff03 -a "inc QWORD PTR [r11+0x18]" 49ff4318 -a "inc QWORD PTR [r12]" 49ff0424 -a "inc QWORD PTR [r12+0x20]" 49ff442420 -a "inc QWORD PTR [r13+0x0]" 49ff4500 -a "inc QWORD PTR [r14]" 49ff06 -a "inc QWORD PTR [r14+0x20]" 49ff4620 -a "inc QWORD PTR [r15]" 49ff07 -a "inc QWORD PTR [r8]" 49ff00 -a "inc QWORD PTR [r9]" 49ff01 -a "inc QWORD PTR [rax]" 48ff00 -a "inc QWORD PTR [rax+0x20]" 48ff4020 -a "inc QWORD PTR [rax-0x8]" 48ff40f8 -a "inc QWORD PTR [rbp+0xb0]" 48ff85b0000000 -a "inc QWORD PTR [rbx]" 48ff03 -a "inc QWORD PTR [rbx+0x138]" 48ff8338010000 -a "inc QWORD PTR [rcx]" 48ff01 -a "inc QWORD PTR [rcx+0x8]" 48ff4108 -a "inc QWORD PTR [rdi]" 48ff07 -a "inc QWORD PTR [rdi+0x10]" 48ff4710 -a "inc QWORD PTR [rdi+rax*1+0xe1]" 48ff8407e1000000 -a "inc QWORD PTR [rdx]" 48ff02 -a "inc QWORD PTR [rdx+0x10]" 48ff4210 -a "inc QWORD PTR [rip+0x2121a1]" 48ff05a1212100 -a "inc QWORD PTR [rsi]" 48ff06 -a "inc QWORD PTR [rsp]" 48ff0424 -a "inc QWORD PTR [rsp+0x1b8]" 48ff8424b8010000 -a "inc r10" 49ffc2 -a "inc r10d" 41ffc2 -a "inc r11" 49ffc3 -a "inc r11d" 41ffc3 -a "inc r12" 49ffc4 -a "inc r12d" 41ffc4 -a "inc r13" 49ffc5 -a "inc r13d" 41ffc5 -a "inc r14" 49ffc6 -a "inc r14d" 41ffc6 -a "inc r15" 49ffc7 -a "inc r15d" 41ffc7 -a "inc r8" 49ffc0 -a "inc r8d" 41ffc0 -a "inc r9" 49ffc1 -a "inc r9d" 41ffc1 -a "inc rax" 48ffc0 -a "inc rbp" 48ffc5 -a "inc rbx" 48ffc3 -a "inc rcx" 48ffc1 -a "inc rdi" 48ffc7 -a "inc rdx" 48ffc2 -a "inc rsi" 48ffc6 -a "inc WORD PTR [rdi+0x88]" 66ff8788000000 -a "dec al" fec8 -a "dec BYTE PTR [r12]" 41fe0c24 -a "dec BYTE PTR [rbx+0x18]" fe4b18 -a "dec BYTE PTR [rdi+0x18]" fe4f18 -a "dec BYTE PTR [rsi+0x1a]" fe4e1a -a "dec cl" fec9 -a "dec dl" feca -a "dec DWORD PTR [r12]" 41ff0c24 -a "dec DWORD PTR [r12+0x28]" 41ff4c2428 -a "dec DWORD PTR [r13+0x70]" 41ff4d70 -a "dec DWORD PTR [r14]" 41ff0e -a "dec DWORD PTR [r14+0x134]" 41ff8e34010000 -a "dec DWORD PTR [r15]" 41ff0f -a "dec DWORD PTR [r15+0x88]" 41ff8f88000000 -a "dec DWORD PTR [rax]" ff08 -a "dec DWORD PTR [rax+0x14c]" ff884c010000 -a "dec DWORD PTR [rax+rdx*1]" ff0c10 -a "dec DWORD PTR [rax+rdx*1+0x109]" ff8c1009010000 -a "dec DWORD PTR [rbp+0x10]" ff4d10 -a "dec DWORD PTR [rbx]" ff0b -a "dec DWORD PTR [rbx+0x18]" ff4b18 -a "dec DWORD PTR [rbx+0x20]" ff4b20 -a "dec DWORD PTR [rcx]" ff09 -a "dec DWORD PTR [rcx+0x4]" ff4904 -a "dec DWORD PTR [rdi]" ff0f -a "dec DWORD PTR [rdi+0x28]" ff4f28 -a "dec DWORD PTR [rdx]" ff0a -a "dec DWORD PTR [rdx+0x10]" ff4a10 -a "dec DWORD PTR [rdx+rax*1]" ff0c02 -a "dec DWORD PTR [rip+0x2009c8]" ff0dc8092000 -a "dec DWORD PTR [rsi+0x8]" ff4e08 -a "dec DWORD PTR [rsp]" ff0c24 -a "dec DWORD PTR [rsp+0x10]" ff4c2410 -a "dec DWORD PTR [rsp+rax*4+0x400]" ff8c8400040000 -a "dec DWORD PTR [rsp+rbp*4+0x2b8]" ff8cacb8020000 -a "dec eax" ffc8 -a "dec ebp" ffcd -a "dec ebx" ffcb -a "dec ecx" ffc9 -a "dec edi" ffcf -a "dec edx" ffca -a "dec QWORD PTR [r10]" 49ff0a -a "dec QWORD PTR [r10+rax*1]" 49ff0c02 -a "dec QWORD PTR [r11]" 49ff0b -a "dec QWORD PTR [r11+0x18]" 49ff4b18 -a "dec QWORD PTR [r12]" 49ff0c24 -a "dec QWORD PTR [r12+0x20]" 49ff4c2420 -a "dec QWORD PTR [r13+0x0]" 49ff4d00 -a "dec QWORD PTR [r14]" 49ff0e -a "dec QWORD PTR [r14+0x20]" 49ff4e20 -a "dec QWORD PTR [r15]" 49ff0f -a "dec QWORD PTR [r8]" 49ff08 -a "dec QWORD PTR [r9]" 49ff09 -a "dec QWORD PTR [rax]" 48ff08 -a "dec QWORD PTR [rax+0x20]" 48ff4820 -a "dec QWORD PTR [rax-0x8]" 48ff48f8 -a "dec QWORD PTR [rbp+0xb0]" 48ff8db0000000 -a "dec QWORD PTR [rbx]" 48ff0b -a "dec QWORD PTR [rbx+0x138]" 48ff8b38010000 -a "dec QWORD PTR [rcx]" 48ff09 -a "dec QWORD PTR [rcx+0x8]" 48ff4908 -a "dec QWORD PTR [rdi]" 48ff0f -a "dec QWORD PTR [rdi+0x10]" 48ff4f10 -a "dec QWORD PTR [rdi+rax*1+0xe1]" 48ff8c07e1000000 -a "dec QWORD PTR [rdx]" 48ff0a -a "dec QWORD PTR [rdx+0x10]" 48ff4a10 -a "dec QWORD PTR [rip+0x2121a1]" 48ff0da1212100 -a "dec QWORD PTR [rsi]" 48ff0e -a "dec QWORD PTR [rsp]" 48ff0c24 -a "dec QWORD PTR [rsp+0x1b8]" 48ff8c24b8010000 -a "dec r10" 49ffca -a "dec r10d" 41ffca -a "dec r11" 49ffcb -a "dec r11d" 41ffcb -a "dec r12" 49ffcc -a "dec r12d" 41ffcc -a "dec r13" 49ffcd -a "dec r13d" 41ffcd -a "dec r14" 49ffce -a "dec r14d" 41ffce -a "dec r15" 49ffcf -a "dec r15d" 41ffcf -a "dec r8" 49ffc8 -a "dec r8d" 41ffc8 -a "dec r9" 49ffc9 -a "dec r9d" 41ffc9 -a "dec rax" 48ffc8 -a "dec rbp" 48ffcd -a "dec rbx" 48ffcb -a "dec rcx" 48ffc9 -a "dec rdi" 48ffcf -a "dec rdx" 48ffca -a "dec rsi" 48ffce -a "dec WORD PTR [rdi+0x88]" 66ff8f88000000 +a "inc al" fec0 0x0 (seq (set _op (cast 8 false (var rax))) (set _result (+ (var _op) (bv 8 0x1))) (set rax (| (& (var rax) (~ (bv 64 0xff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc BYTE PTR [r12]" 41fe0424 0x0 (seq (set _op (loadw 0 8 (+ (cast 64 false (var r12)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc BYTE PTR [rbx+0x18]" fe4318 0x0 (seq (set _op (loadw 0 8 (+ (var rbx) (bv 64 0x18)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var rbx) (bv 64 0x18)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc BYTE PTR [rdi+0x18]" fe4718 0x0 (seq (set _op (loadw 0 8 (+ (var rdi) (bv 64 0x18)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var rdi) (bv 64 0x18)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc BYTE PTR [rsi+0x1a]" fe461a 0x0 (seq (set _op (loadw 0 8 (+ (var rsi) (bv 64 0x1a)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var rsi) (bv 64 0x1a)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc cl" fec1 0x0 (seq (set _op (cast 8 false (var rcx))) (set _result (+ (var _op) (bv 8 0x1))) (set rcx (| (& (var rcx) (~ (bv 64 0xff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc dl" fec2 0x0 (seq (set _op (cast 8 false (var rdx))) (set _result (+ (var _op) (bv 8 0x1))) (set rdx (| (& (var rdx) (~ (bv 64 0xff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [r12]" 41ff0424 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r12)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [r12+0x28]" 41ff442428 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r12)) (bv 64 0x28)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x28)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [r13+0x70]" 41ff4570 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r13)) (bv 64 0x70)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r13)) (bv 64 0x70)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [r14]" 41ff06 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r14)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [r14+0x134]" 41ff8634010000 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r14)) (bv 64 0x134)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x134)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [r15]" 41ff07 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r15)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r15)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [r15+0x88]" 41ff8788000000 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r15)) (bv 64 0x88)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r15)) (bv 64 0x88)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rax]" ff00 0x0 (seq (set _op (loadw 0 32 (+ (var rax) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rax) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rax+0x14c]" ff804c010000 0x0 (seq (set _op (loadw 0 32 (+ (var rax) (bv 64 0x14c)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rax) (bv 64 0x14c)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rax+rdx*1]" ff0410 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rax+rdx*1+0x109]" ff841009010000 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x109)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x109)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rbp+0x10]" ff4510 0x0 (seq (set _op (loadw 0 32 (+ (var rbp) (bv 64 0x10)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rbp) (bv 64 0x10)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rbx]" ff03 0x0 (seq (set _op (loadw 0 32 (+ (var rbx) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rbx) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rbx+0x18]" ff4318 0x0 (seq (set _op (loadw 0 32 (+ (var rbx) (bv 64 0x18)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rbx) (bv 64 0x18)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rbx+0x20]" ff4320 0x0 (seq (set _op (loadw 0 32 (+ (var rbx) (bv 64 0x20)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rbx) (bv 64 0x20)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rcx]" ff01 0x0 (seq (set _op (loadw 0 32 (+ (var rcx) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rcx) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rcx+0x4]" ff4104 0x0 (seq (set _op (loadw 0 32 (+ (var rcx) (bv 64 0x4)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rcx) (bv 64 0x4)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rdi]" ff07 0x0 (seq (set _op (loadw 0 32 (+ (var rdi) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rdi) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rdi+0x28]" ff4728 0x0 (seq (set _op (loadw 0 32 (+ (var rdi) (bv 64 0x28)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rdi) (bv 64 0x28)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rdx]" ff02 0x0 (seq (set _op (loadw 0 32 (+ (var rdx) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rdx) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rdx+0x10]" ff4210 0x0 (seq (set _op (loadw 0 32 (+ (var rdx) (bv 64 0x10)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rdx) (bv 64 0x10)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rdx+rax*1]" ff0402 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rdx) (* (var rax) (bv 64 0x1))) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rdx) (* (var rax) (bv 64 0x1))) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rip+0x2009c8]" ff05c8092000 0x0 (seq (set _op (loadw 0 32 (+ (bv 64 0x0) (bv 64 0x2009c8)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (bv 64 0x0) (bv 64 0x2009c8)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rsi+0x8]" ff4608 0x0 (seq (set _op (loadw 0 32 (+ (var rsi) (bv 64 0x8)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rsi) (bv 64 0x8)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rsp]" ff0424 0x0 (seq (set _op (loadw 0 32 (+ (var rsp) (bv 64 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rsp) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rsp+0x10]" ff442410 0x0 (seq (set _op (loadw 0 32 (+ (var rsp) (bv 64 0x10)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var rsp) (bv 64 0x10)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rsp+rax*4+0x400]" ff848400040000 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rsp) (* (var rax) (bv 64 0x4))) (bv 64 0x400)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rsp) (* (var rax) (bv 64 0x4))) (bv 64 0x400)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc DWORD PTR [rsp+rbp*4+0x2b8]" ff84acb8020000 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rsp) (* (var rbp) (bv 64 0x4))) (bv 64 0x2b8)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rsp) (* (var rbp) (bv 64 0x4))) (bv 64 0x2b8)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc eax" ffc0 0x0 (seq (set _op (cast 32 false (var rax))) (set _result (+ (var _op) (bv 32 0x1))) (set rax (| (& (var rax) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc ebp" ffc5 0x0 (seq (set _op (cast 32 false (var rbp))) (set _result (+ (var _op) (bv 32 0x1))) (set rbp (| (& (var rbp) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc ebx" ffc3 0x0 (seq (set _op (cast 32 false (var rbx))) (set _result (+ (var _op) (bv 32 0x1))) (set rbx (| (& (var rbx) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc ecx" ffc1 0x0 (seq (set _op (cast 32 false (var rcx))) (set _result (+ (var _op) (bv 32 0x1))) (set rcx (| (& (var rcx) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc edi" ffc7 0x0 (seq (set _op (cast 32 false (var rdi))) (set _result (+ (var _op) (bv 32 0x1))) (set rdi (| (& (var rdi) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc edx" ffc2 0x0 (seq (set _op (cast 32 false (var rdx))) (set _result (+ (var _op) (bv 32 0x1))) (set rdx (| (& (var rdx) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r10]" 49ff02 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r10)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r10)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r10+rax*1]" 49ff0402 0x0 (seq (set _op (loadw 0 64 (+ (+ (cast 64 false (var r10)) (* (var rax) (bv 64 0x1))) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (+ (cast 64 false (var r10)) (* (var rax) (bv 64 0x1))) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r11]" 49ff03 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r11)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r11)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r11+0x18]" 49ff4318 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r11)) (bv 64 0x18)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r11)) (bv 64 0x18)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r12]" 49ff0424 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r12)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r12+0x20]" 49ff442420 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r12)) (bv 64 0x20)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x20)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r13+0x0]" 49ff4500 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r13)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r13)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r14]" 49ff06 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r14)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r14+0x20]" 49ff4620 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r14)) (bv 64 0x20)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x20)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r15]" 49ff07 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r15)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r15)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r8]" 49ff00 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r8)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r8)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [r9]" 49ff01 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r9)) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r9)) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rax]" 48ff00 0x0 (seq (set _op (loadw 0 64 (+ (var rax) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rax) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rax+0x20]" 48ff4020 0x0 (seq (set _op (loadw 0 64 (+ (var rax) (bv 64 0x20)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rax) (bv 64 0x20)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rax-0x8]" 48ff40f8 0x0 (seq (set _op (loadw 0 64 (+ (var rax) (bv 64 0xfffffffffffffff8)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rax) (bv 64 0xfffffffffffffff8)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rbp+0xb0]" 48ff85b0000000 0x0 (seq (set _op (loadw 0 64 (+ (var rbp) (bv 64 0xb0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rbp) (bv 64 0xb0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rbx]" 48ff03 0x0 (seq (set _op (loadw 0 64 (+ (var rbx) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rbx) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rbx+0x138]" 48ff8338010000 0x0 (seq (set _op (loadw 0 64 (+ (var rbx) (bv 64 0x138)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rbx) (bv 64 0x138)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rcx]" 48ff01 0x0 (seq (set _op (loadw 0 64 (+ (var rcx) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rcx) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rcx+0x8]" 48ff4108 0x0 (seq (set _op (loadw 0 64 (+ (var rcx) (bv 64 0x8)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rcx) (bv 64 0x8)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rdi]" 48ff07 0x0 (seq (set _op (loadw 0 64 (+ (var rdi) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rdi) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rdi+0x10]" 48ff4710 0x0 (seq (set _op (loadw 0 64 (+ (var rdi) (bv 64 0x10)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rdi) (bv 64 0x10)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rdi+rax*1+0xe1]" 48ff8407e1000000 0x0 (seq (set _op (loadw 0 64 (+ (+ (var rdi) (* (var rax) (bv 64 0x1))) (bv 64 0xe1)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (+ (var rdi) (* (var rax) (bv 64 0x1))) (bv 64 0xe1)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rdx]" 48ff02 0x0 (seq (set _op (loadw 0 64 (+ (var rdx) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rdx) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rdx+0x10]" 48ff4210 0x0 (seq (set _op (loadw 0 64 (+ (var rdx) (bv 64 0x10)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rdx) (bv 64 0x10)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rip+0x2121a1]" 48ff05a1212100 0x0 (seq (set _op (loadw 0 64 (+ (bv 64 0x0) (bv 64 0x2121a1)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (bv 64 0x0) (bv 64 0x2121a1)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rsi]" 48ff06 0x0 (seq (set _op (loadw 0 64 (+ (var rsi) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rsi) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rsp]" 48ff0424 0x0 (seq (set _op (loadw 0 64 (+ (var rsp) (bv 64 0x0)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rsp) (bv 64 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc QWORD PTR [rsp+0x1b8]" 48ff8424b8010000 0x0 (seq (set _op (loadw 0 64 (+ (var rsp) (bv 64 0x1b8)))) (set _result (+ (var _op) (bv 64 0x1))) (storew 0 (+ (var rsp) (bv 64 0x1b8)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r10" 49ffc2 0x0 (seq (set _op (var r10)) (set _result (+ (var _op) (bv 64 0x1))) (set r10 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r10d" 41ffc2 0x0 (seq (set _op (cast 32 false (var r10))) (set _result (+ (var _op) (bv 32 0x1))) (set r10 (| (& (var r10) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r11" 49ffc3 0x0 (seq (set _op (var r11)) (set _result (+ (var _op) (bv 64 0x1))) (set r11 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r11d" 41ffc3 0x0 (seq (set _op (cast 32 false (var r11))) (set _result (+ (var _op) (bv 32 0x1))) (set r11 (| (& (var r11) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r12" 49ffc4 0x0 (seq (set _op (var r12)) (set _result (+ (var _op) (bv 64 0x1))) (set r12 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r12d" 41ffc4 0x0 (seq (set _op (cast 32 false (var r12))) (set _result (+ (var _op) (bv 32 0x1))) (set r12 (| (& (var r12) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r13" 49ffc5 0x0 (seq (set _op (var r13)) (set _result (+ (var _op) (bv 64 0x1))) (set r13 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r13d" 41ffc5 0x0 (seq (set _op (cast 32 false (var r13))) (set _result (+ (var _op) (bv 32 0x1))) (set r13 (| (& (var r13) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r14" 49ffc6 0x0 (seq (set _op (var r14)) (set _result (+ (var _op) (bv 64 0x1))) (set r14 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r14d" 41ffc6 0x0 (seq (set _op (cast 32 false (var r14))) (set _result (+ (var _op) (bv 32 0x1))) (set r14 (| (& (var r14) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r15" 49ffc7 0x0 (seq (set _op (var r15)) (set _result (+ (var _op) (bv 64 0x1))) (set r15 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r15d" 41ffc7 0x0 (seq (set _op (cast 32 false (var r15))) (set _result (+ (var _op) (bv 32 0x1))) (set r15 (| (& (var r15) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r8" 49ffc0 0x0 (seq (set _op (var r8)) (set _result (+ (var _op) (bv 64 0x1))) (set r8 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r8d" 41ffc0 0x0 (seq (set _op (cast 32 false (var r8))) (set _result (+ (var _op) (bv 32 0x1))) (set r8 (| (& (var r8) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r9" 49ffc1 0x0 (seq (set _op (var r9)) (set _result (+ (var _op) (bv 64 0x1))) (set r9 (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc r9d" 41ffc1 0x0 (seq (set _op (cast 32 false (var r9))) (set _result (+ (var _op) (bv 32 0x1))) (set r9 (| (& (var r9) (~ (bv 64 0xffffffff))) (cast 64 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rax" 48ffc0 0x0 (seq (set _op (var rax)) (set _result (+ (var _op) (bv 64 0x1))) (set rax (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rbp" 48ffc5 0x0 (seq (set _op (var rbp)) (set _result (+ (var _op) (bv 64 0x1))) (set rbp (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rbx" 48ffc3 0x0 (seq (set _op (var rbx)) (set _result (+ (var _op) (bv 64 0x1))) (set rbx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rcx" 48ffc1 0x0 (seq (set _op (var rcx)) (set _result (+ (var _op) (bv 64 0x1))) (set rcx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rdi" 48ffc7 0x0 (seq (set _op (var rdi)) (set _result (+ (var _op) (bv 64 0x1))) (set rdi (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rdx" 48ffc2 0x0 (seq (set _op (var rdx)) (set _result (+ (var _op) (bv 64 0x1))) (set rdx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc rsi" 48ffc6 0x0 (seq (set _op (var rsi)) (set _result (+ (var _op) (bv 64 0x1))) (set rsi (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "inc WORD PTR [rdi+0x88]" 66ff8788000000 0x0 (seq (set _op (loadw 0 16 (+ (var rdi) (bv 64 0x88)))) (set _result (+ (var _op) (bv 16 0x1))) (storew 0 (+ (var rdi) (bv 64 0x88)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 16 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result)))) +a "dec al" fec8 0x0 (seq (set _op (cast 8 false (var rax))) (set _dec (- (var _op) (bv 8 0x1))) (set rax (| (& (var rax) (~ (bv 64 0xff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec BYTE PTR [r12]" 41fe0c24 0x0 (seq (set _op (loadw 0 8 (+ (cast 64 false (var r12)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 8 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec BYTE PTR [rbx+0x18]" fe4b18 0x0 (seq (set _op (loadw 0 8 (+ (var rbx) (bv 64 0x18)))) (set _dec (- (var _op) (bv 8 0x1))) (storew 0 (+ (var rbx) (bv 64 0x18)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec BYTE PTR [rdi+0x18]" fe4f18 0x0 (seq (set _op (loadw 0 8 (+ (var rdi) (bv 64 0x18)))) (set _dec (- (var _op) (bv 8 0x1))) (storew 0 (+ (var rdi) (bv 64 0x18)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec BYTE PTR [rsi+0x1a]" fe4e1a 0x0 (seq (set _op (loadw 0 8 (+ (var rsi) (bv 64 0x1a)))) (set _dec (- (var _op) (bv 8 0x1))) (storew 0 (+ (var rsi) (bv 64 0x1a)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec cl" fec9 0x0 (seq (set _op (cast 8 false (var rcx))) (set _dec (- (var _op) (bv 8 0x1))) (set rcx (| (& (var rcx) (~ (bv 64 0xff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec dl" feca 0x0 (seq (set _op (cast 8 false (var rdx))) (set _dec (- (var _op) (bv 8 0x1))) (set rdx (| (& (var rdx) (~ (bv 64 0xff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [r12]" 41ff0c24 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r12)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [r12+0x28]" 41ff4c2428 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r12)) (bv 64 0x28)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x28)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [r13+0x70]" 41ff4d70 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r13)) (bv 64 0x70)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r13)) (bv 64 0x70)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [r14]" 41ff0e 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r14)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [r14+0x134]" 41ff8e34010000 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r14)) (bv 64 0x134)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x134)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [r15]" 41ff0f 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r15)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r15)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [r15+0x88]" 41ff8f88000000 0x0 (seq (set _op (loadw 0 32 (+ (cast 64 false (var r15)) (bv 64 0x88)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (cast 64 false (var r15)) (bv 64 0x88)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rax]" ff08 0x0 (seq (set _op (loadw 0 32 (+ (var rax) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rax) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rax+0x14c]" ff884c010000 0x0 (seq (set _op (loadw 0 32 (+ (var rax) (bv 64 0x14c)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rax) (bv 64 0x14c)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rax+rdx*1]" ff0c10 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rax+rdx*1+0x109]" ff8c1009010000 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x109)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rax) (* (var rdx) (bv 64 0x1))) (bv 64 0x109)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rbp+0x10]" ff4d10 0x0 (seq (set _op (loadw 0 32 (+ (var rbp) (bv 64 0x10)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rbp) (bv 64 0x10)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rbx]" ff0b 0x0 (seq (set _op (loadw 0 32 (+ (var rbx) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rbx) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rbx+0x18]" ff4b18 0x0 (seq (set _op (loadw 0 32 (+ (var rbx) (bv 64 0x18)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rbx) (bv 64 0x18)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rbx+0x20]" ff4b20 0x0 (seq (set _op (loadw 0 32 (+ (var rbx) (bv 64 0x20)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rbx) (bv 64 0x20)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rcx]" ff09 0x0 (seq (set _op (loadw 0 32 (+ (var rcx) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rcx) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rcx+0x4]" ff4904 0x0 (seq (set _op (loadw 0 32 (+ (var rcx) (bv 64 0x4)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rcx) (bv 64 0x4)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rdi]" ff0f 0x0 (seq (set _op (loadw 0 32 (+ (var rdi) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rdi) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rdi+0x28]" ff4f28 0x0 (seq (set _op (loadw 0 32 (+ (var rdi) (bv 64 0x28)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rdi) (bv 64 0x28)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rdx]" ff0a 0x0 (seq (set _op (loadw 0 32 (+ (var rdx) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rdx) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rdx+0x10]" ff4a10 0x0 (seq (set _op (loadw 0 32 (+ (var rdx) (bv 64 0x10)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rdx) (bv 64 0x10)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rdx+rax*1]" ff0c02 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rdx) (* (var rax) (bv 64 0x1))) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rdx) (* (var rax) (bv 64 0x1))) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rip+0x2009c8]" ff0dc8092000 0x0 (seq (set _op (loadw 0 32 (+ (bv 64 0x0) (bv 64 0x2009c8)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (bv 64 0x0) (bv 64 0x2009c8)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rsi+0x8]" ff4e08 0x0 (seq (set _op (loadw 0 32 (+ (var rsi) (bv 64 0x8)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rsi) (bv 64 0x8)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rsp]" ff0c24 0x0 (seq (set _op (loadw 0 32 (+ (var rsp) (bv 64 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rsp) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rsp+0x10]" ff4c2410 0x0 (seq (set _op (loadw 0 32 (+ (var rsp) (bv 64 0x10)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var rsp) (bv 64 0x10)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rsp+rax*4+0x400]" ff8c8400040000 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rsp) (* (var rax) (bv 64 0x4))) (bv 64 0x400)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rsp) (* (var rax) (bv 64 0x4))) (bv 64 0x400)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec DWORD PTR [rsp+rbp*4+0x2b8]" ff8cacb8020000 0x0 (seq (set _op (loadw 0 32 (+ (+ (var rsp) (* (var rbp) (bv 64 0x4))) (bv 64 0x2b8)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var rsp) (* (var rbp) (bv 64 0x4))) (bv 64 0x2b8)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec eax" ffc8 0x0 (seq (set _op (cast 32 false (var rax))) (set _dec (- (var _op) (bv 32 0x1))) (set rax (| (& (var rax) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec ebp" ffcd 0x0 (seq (set _op (cast 32 false (var rbp))) (set _dec (- (var _op) (bv 32 0x1))) (set rbp (| (& (var rbp) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec ebx" ffcb 0x0 (seq (set _op (cast 32 false (var rbx))) (set _dec (- (var _op) (bv 32 0x1))) (set rbx (| (& (var rbx) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec ecx" ffc9 0x0 (seq (set _op (cast 32 false (var rcx))) (set _dec (- (var _op) (bv 32 0x1))) (set rcx (| (& (var rcx) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec edi" ffcf 0x0 (seq (set _op (cast 32 false (var rdi))) (set _dec (- (var _op) (bv 32 0x1))) (set rdi (| (& (var rdi) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec edx" ffca 0x0 (seq (set _op (cast 32 false (var rdx))) (set _dec (- (var _op) (bv 32 0x1))) (set rdx (| (& (var rdx) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r10]" 49ff0a 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r10)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r10)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r10+rax*1]" 49ff0c02 0x0 (seq (set _op (loadw 0 64 (+ (+ (cast 64 false (var r10)) (* (var rax) (bv 64 0x1))) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (+ (cast 64 false (var r10)) (* (var rax) (bv 64 0x1))) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r11]" 49ff0b 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r11)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r11)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r11+0x18]" 49ff4b18 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r11)) (bv 64 0x18)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r11)) (bv 64 0x18)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r12]" 49ff0c24 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r12)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r12+0x20]" 49ff4c2420 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r12)) (bv 64 0x20)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r12)) (bv 64 0x20)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r13+0x0]" 49ff4d00 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r13)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r13)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r14]" 49ff0e 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r14)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r14+0x20]" 49ff4e20 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r14)) (bv 64 0x20)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r14)) (bv 64 0x20)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r15]" 49ff0f 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r15)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r15)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r8]" 49ff08 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r8)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r8)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [r9]" 49ff09 0x0 (seq (set _op (loadw 0 64 (+ (cast 64 false (var r9)) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (cast 64 false (var r9)) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rax]" 48ff08 0x0 (seq (set _op (loadw 0 64 (+ (var rax) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rax) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rax+0x20]" 48ff4820 0x0 (seq (set _op (loadw 0 64 (+ (var rax) (bv 64 0x20)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rax) (bv 64 0x20)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rax-0x8]" 48ff48f8 0x0 (seq (set _op (loadw 0 64 (+ (var rax) (bv 64 0xfffffffffffffff8)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rax) (bv 64 0xfffffffffffffff8)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rbp+0xb0]" 48ff8db0000000 0x0 (seq (set _op (loadw 0 64 (+ (var rbp) (bv 64 0xb0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rbp) (bv 64 0xb0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rbx]" 48ff0b 0x0 (seq (set _op (loadw 0 64 (+ (var rbx) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rbx) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rbx+0x138]" 48ff8b38010000 0x0 (seq (set _op (loadw 0 64 (+ (var rbx) (bv 64 0x138)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rbx) (bv 64 0x138)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rcx]" 48ff09 0x0 (seq (set _op (loadw 0 64 (+ (var rcx) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rcx) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rcx+0x8]" 48ff4908 0x0 (seq (set _op (loadw 0 64 (+ (var rcx) (bv 64 0x8)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rcx) (bv 64 0x8)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rdi]" 48ff0f 0x0 (seq (set _op (loadw 0 64 (+ (var rdi) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rdi) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rdi+0x10]" 48ff4f10 0x0 (seq (set _op (loadw 0 64 (+ (var rdi) (bv 64 0x10)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rdi) (bv 64 0x10)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rdi+rax*1+0xe1]" 48ff8c07e1000000 0x0 (seq (set _op (loadw 0 64 (+ (+ (var rdi) (* (var rax) (bv 64 0x1))) (bv 64 0xe1)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (+ (var rdi) (* (var rax) (bv 64 0x1))) (bv 64 0xe1)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rdx]" 48ff0a 0x0 (seq (set _op (loadw 0 64 (+ (var rdx) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rdx) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rdx+0x10]" 48ff4a10 0x0 (seq (set _op (loadw 0 64 (+ (var rdx) (bv 64 0x10)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rdx) (bv 64 0x10)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rip+0x2121a1]" 48ff0da1212100 0x0 (seq (set _op (loadw 0 64 (+ (bv 64 0x0) (bv 64 0x2121a1)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (bv 64 0x0) (bv 64 0x2121a1)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rsi]" 48ff0e 0x0 (seq (set _op (loadw 0 64 (+ (var rsi) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rsi) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rsp]" 48ff0c24 0x0 (seq (set _op (loadw 0 64 (+ (var rsp) (bv 64 0x0)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rsp) (bv 64 0x0)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec QWORD PTR [rsp+0x1b8]" 48ff8c24b8010000 0x0 (seq (set _op (loadw 0 64 (+ (var rsp) (bv 64 0x1b8)))) (set _dec (- (var _op) (bv 64 0x1))) (storew 0 (+ (var rsp) (bv 64 0x1b8)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r10" 49ffca 0x0 (seq (set _op (var r10)) (set _dec (- (var _op) (bv 64 0x1))) (set r10 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r10d" 41ffca 0x0 (seq (set _op (cast 32 false (var r10))) (set _dec (- (var _op) (bv 32 0x1))) (set r10 (| (& (var r10) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r11" 49ffcb 0x0 (seq (set _op (var r11)) (set _dec (- (var _op) (bv 64 0x1))) (set r11 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r11d" 41ffcb 0x0 (seq (set _op (cast 32 false (var r11))) (set _dec (- (var _op) (bv 32 0x1))) (set r11 (| (& (var r11) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r12" 49ffcc 0x0 (seq (set _op (var r12)) (set _dec (- (var _op) (bv 64 0x1))) (set r12 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r12d" 41ffcc 0x0 (seq (set _op (cast 32 false (var r12))) (set _dec (- (var _op) (bv 32 0x1))) (set r12 (| (& (var r12) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r13" 49ffcd 0x0 (seq (set _op (var r13)) (set _dec (- (var _op) (bv 64 0x1))) (set r13 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r13d" 41ffcd 0x0 (seq (set _op (cast 32 false (var r13))) (set _dec (- (var _op) (bv 32 0x1))) (set r13 (| (& (var r13) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r14" 49ffce 0x0 (seq (set _op (var r14)) (set _dec (- (var _op) (bv 64 0x1))) (set r14 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r14d" 41ffce 0x0 (seq (set _op (cast 32 false (var r14))) (set _dec (- (var _op) (bv 32 0x1))) (set r14 (| (& (var r14) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r15" 49ffcf 0x0 (seq (set _op (var r15)) (set _dec (- (var _op) (bv 64 0x1))) (set r15 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r15d" 41ffcf 0x0 (seq (set _op (cast 32 false (var r15))) (set _dec (- (var _op) (bv 32 0x1))) (set r15 (| (& (var r15) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r8" 49ffc8 0x0 (seq (set _op (var r8)) (set _dec (- (var _op) (bv 64 0x1))) (set r8 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r8d" 41ffc8 0x0 (seq (set _op (cast 32 false (var r8))) (set _dec (- (var _op) (bv 32 0x1))) (set r8 (| (& (var r8) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r9" 49ffc9 0x0 (seq (set _op (var r9)) (set _dec (- (var _op) (bv 64 0x1))) (set r9 (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec r9d" 41ffc9 0x0 (seq (set _op (cast 32 false (var r9))) (set _dec (- (var _op) (bv 32 0x1))) (set r9 (| (& (var r9) (~ (bv 64 0xffffffff))) (cast 64 false (var _dec)))) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec rax" 48ffc8 0x0 (seq (set _op (var rax)) (set _dec (- (var _op) (bv 64 0x1))) (set rax (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec rbp" 48ffcd 0x0 (seq (set _op (var rbp)) (set _dec (- (var _op) (bv 64 0x1))) (set rbp (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec rbx" 48ffcb 0x0 (seq (set _op (var rbx)) (set _dec (- (var _op) (bv 64 0x1))) (set rbx (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec rcx" 48ffc9 0x0 (seq (set _op (var rcx)) (set _dec (- (var _op) (bv 64 0x1))) (set rcx (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec rdi" 48ffcf 0x0 (seq (set _op (var rdi)) (set _dec (- (var _op) (bv 64 0x1))) (set rdi (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec rdx" 48ffca 0x0 (seq (set _op (var rdx)) (set _dec (- (var _op) (bv 64 0x1))) (set rdx (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec rsi" 48ffce 0x0 (seq (set _op (var rsi)) (set _dec (- (var _op) (bv 64 0x1))) (set rsi (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 64 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) +a "dec WORD PTR [rdi+0x88]" 66ff8f88000000 0x0 (seq (set _op (loadw 0 16 (+ (var rdi) (bv 64 0x88)))) (set _dec (- (var _op) (bv 16 0x1))) (storew 0 (+ (var rdi) (bv 64 0x88)) (var _dec)) (set _result (var _dec)) (set _popcnt (bv 8 0x0)) (set _val (cast 8 false (var _result))) (repeat (is_zero (var _val)) (seq (set _popcnt (+ (var _popcnt) (ite (lsb (var _val)) (bv 8 0x1) (bv 8 0x0)))) (set _val (>> (var _val) (bv 8 0x1) false)))) (set pf (is_zero (mod (var _popcnt) (bv 8 0x2)))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 16 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x)))))))) a "bswap rax" 480fc8 a "bswap r15" 490fcf a "bswap eax" 0fc8 a "bswap r15d" 410fcf ad "endbr64" f30f1efa -ad "xchg eax, r8d" 4190 -a "xchg r8d, eax" 4190 -ad "xchg rax, rdx" 4892 -a "xchg rdx, rax" 4892 -ad "xchg rax, r8" 4990 -a "xchg r8, rax" 4990 -ad "xchg rdx, rbx" 4887da -ad "xchg rbx, rdx" 4887d3 -ad "xchg r8, r15" 4d87f8 -ad "xchg r15, r8" 4d87c7 -ad "xchg r8d, r15d" 4587f8 -ad "xchg r15d, r8d" 4587c7 -ad "xchg rdx, r8" 4c87c2 -ad "xchg r15, rdx" 4987d7 -d "call qword [rip + 0x3a8f3e]" 48ff153e8f3a00 -d "call qword [rip + 0x1d638f]" 48ff158f631d00 +ad "xchg eax, r8d" 4190 0x0 (seq (set _temp (cast 32 false (var rax))) (set rax (| (& (var rax) (~ (bv 64 0xffffffff))) (cast 64 false (cast 32 false (var r8))))) (set r8 (| (& (var r8) (~ (bv 64 0xffffffff))) (cast 64 false (var _temp))))) +a "xchg r8d, eax" 4190 0x0 (seq (set _temp (cast 32 false (var rax))) (set rax (| (& (var rax) (~ (bv 64 0xffffffff))) (cast 64 false (cast 32 false (var r8))))) (set r8 (| (& (var r8) (~ (bv 64 0xffffffff))) (cast 64 false (var _temp))))) +ad "xchg rax, rdx" 4892 0x0 (seq (set _temp (var rax)) (set rax (var rdx)) (set rdx (var _temp))) +a "xchg rdx, rax" 4892 0x0 (seq (set _temp (var rax)) (set rax (var rdx)) (set rdx (var _temp))) +ad "xchg rax, r8" 4990 0x0 (seq (set _temp (var rax)) (set rax (var r8)) (set r8 (var _temp))) +a "xchg r8, rax" 4990 0x0 (seq (set _temp (var rax)) (set rax (var r8)) (set r8 (var _temp))) +ad "xchg rdx, rbx" 4887da 0x0 (seq (set _temp (var rdx)) (set rdx (var rbx)) (set rbx (var _temp))) +ad "xchg rbx, rdx" 4887d3 0x0 (seq (set _temp (var rbx)) (set rbx (var rdx)) (set rdx (var _temp))) +ad "xchg r8, r15" 4d87f8 0x0 (seq (set _temp (var r8)) (set r8 (var r15)) (set r15 (var _temp))) +ad "xchg r15, r8" 4d87c7 0x0 (seq (set _temp (var r15)) (set r15 (var r8)) (set r8 (var _temp))) +ad "xchg r8d, r15d" 4587f8 0x0 (seq (set _temp (cast 32 false (var r8))) (set r8 (| (& (var r8) (~ (bv 64 0xffffffff))) (cast 64 false (cast 32 false (var r15))))) (set r15 (| (& (var r15) (~ (bv 64 0xffffffff))) (cast 64 false (var _temp))))) +ad "xchg r15d, r8d" 4587c7 0x0 (seq (set _temp (cast 32 false (var r15))) (set r15 (| (& (var r15) (~ (bv 64 0xffffffff))) (cast 64 false (cast 32 false (var r8))))) (set r8 (| (& (var r8) (~ (bv 64 0xffffffff))) (cast 64 false (var _temp))))) +ad "xchg rdx, r8" 4c87c2 0x0 (seq (set _temp (var rdx)) (set rdx (var r8)) (set r8 (var _temp))) +ad "xchg r15, rdx" 4987d7 0x0 (seq (set _temp (var r15)) (set r15 (var rdx)) (set rdx (var _temp))) +d "call qword [rip + 0x3a8f3e]" 48ff153e8f3a00 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) +d "call qword [rip + 0x1d638f]" 48ff158f631d00 0x0 (seq (set rsp (- (var rsp) (bv 64 0x8))) (storew 0 (+ (var rsp) (bv 64 0x0)) (cast 16 false (bv 64 0x0)))) a "fmul st2, st0" dcca a "fdiv st0, st1" d8f1 a "fdiv st(0), st(1)" d8f1