/bat0/stac/Code/icra/WALi-OpenNWA/../icra -cra_newton_basic -cra-split-loops

Passing command-line option -cra-split-loops to duet.
<Unique State Name, 109> -> <Unique State Name, 34>	Base relation: 
{tmp___2 := return:14}	
<Unique State Name, 15> -> <Unique State Name, 113>	Base relation: 
{password_binval := havoc:15
 guess_binval := havoc:0
 when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
         /\ havoc:15 < 16777216)}	
<Unique State Name, 12> -> <Unique State Name, 117>	Base relation: 
{return := havoc:7
 return@pos := type_err:10
 return@width := type_err:11}	
<Unique State Name, 84> -> <Unique State Name, 90>	Base relation: 
{tmp := return:14
 param0 := guess_binval:4
 param1 := 2
 param0@pos := type_err:97
 param1@pos := type_err:99
 param0@width := type_err:98
 param1@width := type_err:100}	
<Unique State Name, 34> -> <Unique State Name, 49>	Base relation: 
{__retres7 := 1
 when (tmp___1:36 < tmp___2:35 \/ tmp___2:35 < tmp___1:36)}	
<Unique State Name, 34> -> <Unique State Name, 95>	Base relation: 
{param0 := password_binval:5
 param1 := 0
 param0@pos := type_err:101
 param1@pos := type_err:103
 param0@width := type_err:102
 param1@width := type_err:104
 when (tmp___2:35 <= tmp___1:36 /\ tmp___1:36 <= tmp___2:35)}	
<Unique State Name, 99> -> <Unique State Name, 110>	Base relation: 
{tmp___1 := return:14
 param0 := guess_binval:4
 param1 := 1
 param0@pos := type_err:113
 param1@pos := type_err:115
 param0@width := type_err:114
 param1@width := type_err:116}	
<Unique State Name, 49> -> <Unique State Name, 116>	Base relation: 
{return := __retres7:39
 return@pos := type_err:42
 return@width := type_err:43}	
<Unique State Name, 110> -> <Unique State Name, 79 109>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 100> -> <Unique State Name, 79 99>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 77> -> <Unique State Name, 115>	Base relation: 
{return := (return:14 mod 256)
 return@pos := type_err:250
 return@width := type_err:251}	
<Unique State Name, 95> -> <Unique State Name, 79 94>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 85> -> <Unique State Name, 79 84>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 104> -> <Unique State Name, 49>	Base relation: 
{__retres7 := phi___retres7:117
 when (((tmp___3:38 < return:14 \/ return:14 < tmp___3:38)
          /\ 2 = phi___retres7:117)
         \/ (return:14 <= tmp___3:38 /\ tmp___3:38 <= return:14
               /\ 3 = phi___retres7:117))}	
<Unique State Name, 105> -> <Unique State Name, 79 104>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 56> -> <Unique State Name, 118>	Base relation: 
{when 0 <= i:269}	
<Unique State Name, 117> -> <Unique State Name, >	Base relation: 
{}	
<Unique State Name, 78> -> <Unique State Name, 72 77>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 115> -> <Unique State Name, >	Base relation: 
{}	
<Unique State Name, 113> -> <Unique State Name, 50 112>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 24> -> <Unique State Name, 49>	Base relation: 
{__retres7 := 0
 when (tmp:34 < tmp___0:33 \/ tmp___0:33 < tmp:34)}	
<Unique State Name, 24> -> <Unique State Name, 100>	Base relation: 
{param0 := password_binval:5
 param1 := 1
 param0@pos := type_err:105
 param1@pos := type_err:107
 param0@width := type_err:106
 param1@width := type_err:108
 when (tmp___0:33 <= tmp:34 /\ tmp:34 <= tmp___0:33)}	
<Unique State Name, 90> -> <Unique State Name, 79 89>	Base relation: 
{}	MergeFn[Base relation: 
{}]
<Unique State Name, 79> -> <Unique State Name, 78>	Base relation: 
{param0 := param0:246
 param1 := param1:249
 param0@pos := type_err:256
 param1@pos := type_err:257
 param0@width := type_err:258
 param1@width := type_err:259}	
<Unique State Name, 89> -> <Unique State Name, 24>	Base relation: 
{tmp___0 := return:14}	
<Unique State Name, 50> -> <Unique State Name, 85>	Base relation: 
{param0 := password_binval:5
 param1 := 2
 param0@pos := type_err:93
 param1@pos := type_err:95
 param0@width := type_err:94
 param1@width := type_err:96
 when (0 <= guess_binval:4 /\ 0 <= password_binval:5)}	
<Unique State Name, 72> -> <Unique State Name, 56>	Base relation: 
{i := 0
 s := param0:246
 k := param1:249}	
<Unique State Name, 94> -> <Unique State Name, 105>	Base relation: 
{tmp___3 := return:14
 param0 := guess_binval:4
 param1 := 0
 param0@pos := type_err:109
 param1@pos := type_err:111
 param0@width := type_err:110
 param1@width := type_err:112}	
<Unique State Name, 60> -> <Unique State Name, 56>	Base relation: 
{i := (i:269 + 1)
 s := ite(0 <= s:271, floor((s:271 / 256)), -(floor(-((s:271 / 256)))))
 when i:269 < k:270}	
<Unique State Name, 60> -> <Unique State Name, 114>	Base relation: 
{return := s:271
 return@pos := type_err:277
 return@width := type_err:278
 when k:270 <= i:269}	
<Unique State Name, 114> -> <Unique State Name, >	Base relation: 
{}	
<Unique State Name, 112> -> <Unique State Name, 12>	Base relation: 
{result := return:14}	
<Unique State Name, 118> -> <Unique State Name, 60>	Base relation: 
{}	
<Unique State Name, 116> -> <Unique State Name, >	Base relation: 
{}	
#################################################################
           Beginning Interprocedural Anaylsis (with regexp=IRE)  
Step 1: =========================================================
Step 2: =========================================================
Step 3: =========================================================
        Converting to IRE regular expressions
(Not performing widening.)
alphaHatStar {
**** body value: Base relation: 
{i := (i:269 + 1)
 s := ite(0 <= s:271, floor((s:271 / 256)), -(floor(-((s:271 / 256)))))
 when (0 <= i:269 /\ i:269 < k:270)}
**** alpha hat: 
  {<Split [!(-s:271 <= 0)
            (i':339) = (1)*(i:269) + 1
           ((-256 * s':340)) <= (1)*((-256 * s:271)) + (-255)*1
           }
          pre:
            [|-s:271-256floor((-1/256 * s:271))>=0; -s:271-1>=0;
              -i:269+k:270-1>=0; floor((-1/256 * s:271))>=0; i:269>=0;
              s:271+256floor((-1/256 * s:271))+255>=0|]
          post:
            [|-s':340>=0; i':339-1>=0; k:270-i':339>=0|]
           (i':339) = (1)*(i:269) + 1
          (s':340) <= (1)*(s:271) + 0
          }
  pre:
    [|-i:269+k:270-1>=0; -s:271+256floor((1/256 * s:271))+255>=0;
      floor((1/256 * s:271))>=0; s:271-256floor((1/256 * s:271))>=0; 
      i:269>=0|]
  post:
    [|i':339-1>=0; s':340>=0; k:270-i':339>=0|]]>}
**** star transition: 
  {i := i':339
   s := s':340
   when ((!(0 <= K:350) \/ mid_i:353 = (i:269 + K:350))
           /\ (!(0 <= K:350)
                 \/ (-256 * mid_s:352) <= ((-256 * s:271) + (-255 * K:350)))
           /\ ((K:350 = 0 /\ s:271 = mid_s:352 /\ i:269 = mid_i:353)
                 \/ (1 <= K:350
                       /\ 0 <= (-s:271 + (-256 * floor((-1/256 * s:271))))
                       /\ 0 <= (-1 + -s:271) /\ 0 <= (-1 + -i:269 + k:270)
                       /\ 0 <= floor((-1/256 * s:271)) /\ 0 <= i:269
                       /\ 0 <= (255 + s:271 + (256 * floor((-1/256 * s:271))))
                       /\ 0 <= -mid_s:352 /\ 0 <= (-1 + mid_i:353)
                       /\ 0 <= (k:270 + -mid_i:353)))
           /\ (0 = K:350 \/ !(-s:271 <= 0))
           /\ (!(0 <= K:351) \/ i':339 = (mid_i:353 + K:351))
           /\ (!(0 <= K:351) \/ s':340 <= mid_s:352)
           /\ ((K:351 = 0 /\ mid_s:352 = s':340 /\ mid_i:353 = i':339)
                 \/ (1 <= K:351 /\ 0 <= (-1 + -mid_i:353 + k:270)
                       /\ 0 <= (255 + -mid_s:352
                                  + (256 * floor((1/256 * mid_s:352))))
                       /\ 0 <= floor((1/256 * mid_s:352))
                       /\ 0 <= (mid_s:352
                                  + (-256 * floor((1/256 * mid_s:352))))
                       /\ 0 <= mid_i:353 /\ 0 <= (-1 + i':339) /\ 0 <= s':340
                       /\ 0 <= (k:270 + -i':339)))
           /\ (0 = K:351 \/ -mid_s:352 <= 0) /\ (K:350 + K:351) = K:349
           /\ 0 <= K:349)}
}
Step 4: =========================================================
The procedure (i.e., variable) numbers are: 
7  31  37  43  


New-style (IRE) regular expression in IREregExpMap for reID=7: 
Dot(
  Dot(
    Weight(Base relation: 
      {password_binval := havoc:15
       guess_binval := havoc:0
       when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
               /\ havoc:15 < 16777216)}    )
    ,
    Var(31)
  )
  ,
  Weight(Base relation: 
    {result := return:14
     return := havoc:363
     return@pos := type_err:364
     return@width := type_err:365}  )
)


New-style (IRE) regular expression in IREregExpMap for reID=31: 
Dot(
  Plus(
    Plus(
      Dot(
        Dot(
          Dot(
            Dot(
              Weight(Base relation: 
                {param0 := password_binval:5
                 param1 := 2
                 param0@pos := type_err:93
                 param1@pos := type_err:95
                 param0@width := type_err:94
                 param1@width := type_err:96
                 when (0 <= guess_binval:4 /\ 0 <= password_binval:5)}              )
              ,
              Var(37)
            )
            ,
            Weight(Base relation: 
              {tmp := return:14
               param0 := guess_binval:4
               param1 := 2
               param0@pos := type_err:97
               param1@pos := type_err:99
               param0@width := type_err:98
               param1@width := type_err:100}            )
          )
          ,
          Var(37)
        )
        ,
        Weight(Base relation: 
          {tmp___0 := return:14
           __retres7 := 0
           when (tmp:34 < return:14 \/ return:14 < tmp:34)}        )
      )
      ,
      Dot(
        Dot(
          Dot(
            Dot(
              Dot(
                Dot(
                  Dot(
                    Dot(
                      Weight(Base relation: 
                        {param0 := password_binval:5
                         param1 := 2
                         param0@pos := type_err:93
                         param1@pos := type_err:95
                         param0@width := type_err:94
                         param1@width := type_err:96
                         when (0 <= guess_binval:4 /\ 0 <= password_binval:5)}                      )
                      ,
                      Var(37)
                    )
                    ,
                    Weight(Base relation: 
                      {tmp := return:14
                       param0 := guess_binval:4
                       param1 := 2
                       param0@pos := type_err:97
                       param1@pos := type_err:99
                       param0@width := type_err:98
                       param1@width := type_err:100}                    )
                  )
                  ,
                  Var(37)
                )
                ,
                Weight(Base relation: 
                  {tmp___0 := return:14
                   param0 := password_binval:5
                   param1 := 1
                   param0@pos := type_err:331
                   param1@pos := type_err:332
                   param0@width := type_err:333
                   param1@width := type_err:334
                   when (return:14 <= tmp:34 /\ tmp:34 <= return:14)}                )
              )
              ,
              Var(37)
            )
            ,
            Weight(Base relation: 
              {tmp___1 := return:14
               param0 := guess_binval:4
               param1 := 1
               param0@pos := type_err:113
               param1@pos := type_err:115
               param0@width := type_err:114
               param1@width := type_err:116}            )
          )
          ,
          Var(37)
        )
        ,
        Weight(Base relation: 
          {tmp___2 := return:14
           __retres7 := 1
           when (tmp___1:36 < return:14 \/ return:14 < tmp___1:36)}        )
      )
    )
    ,
    Dot(
      Dot(
        Dot(
          Dot(
            Dot(
              Dot(
                Dot(
                  Dot(
                    Dot(
                      Dot(
                        Dot(
                          Dot(
                            Weight(Base relation: 
                              {param0 := password_binval:5
                               param1 := 2
                               param0@pos := type_err:93
                               param1@pos := type_err:95
                               param0@width := type_err:94
                               param1@width := type_err:96
                               when (0 <= guess_binval:4
                                       /\ 0 <= password_binval:5)}                            )
                            ,
                            Var(37)
                          )
                          ,
                          Weight(Base relation: 
                            {tmp := return:14
                             param0 := guess_binval:4
                             param1 := 2
                             param0@pos := type_err:97
                             param1@pos := type_err:99
                             param0@width := type_err:98
                             param1@width := type_err:100}                          )
                        )
                        ,
                        Var(37)
                      )
                      ,
                      Weight(Base relation: 
                        {tmp___0 := return:14
                         param0 := password_binval:5
                         param1 := 1
                         param0@pos := type_err:331
                         param1@pos := type_err:332
                         param0@width := type_err:333
                         param1@width := type_err:334
                         when (return:14 <= tmp:34 /\ tmp:34 <= return:14)}                      )
                    )
                    ,
                    Var(37)
                  )
                  ,
                  Weight(Base relation: 
                    {tmp___1 := return:14
                     param0 := guess_binval:4
                     param1 := 1
                     param0@pos := type_err:113
                     param1@pos := type_err:115
                     param0@width := type_err:114
                     param1@width := type_err:116}                  )
                )
                ,
                Var(37)
              )
              ,
              Weight(Base relation: 
                {tmp___2 := return:14
                 param0 := password_binval:5
                 param1 := 0
                 param0@pos := type_err:335
                 param1@pos := type_err:336
                 param0@width := type_err:337
                 param1@width := type_err:338
                 when (return:14 <= tmp___1:36 /\ tmp___1:36 <= return:14)}              )
            )
            ,
            Var(37)
          )
          ,
          Weight(Base relation: 
            {tmp___3 := return:14
             param0 := guess_binval:4
             param1 := 0
             param0@pos := type_err:109
             param1@pos := type_err:111
             param0@width := type_err:110
             param1@width := type_err:112}          )
        )
        ,
        Var(37)
      )
      ,
      Weight(Base relation: 
        {__retres7 := phi___retres7:117
         when (((tmp___3:38 < return:14 \/ return:14 < tmp___3:38)
                  /\ 2 = phi___retres7:117)
                 \/ (return:14 <= tmp___3:38 /\ tmp___3:38 <= return:14
                       /\ 3 = phi___retres7:117))}      )
    )
  )
  ,
  Weight(Base relation: 
    {return := __retres7:39
     return@pos := type_err:42
     return@width := type_err:43}  )
)


New-style (IRE) regular expression in IREregExpMap for reID=37: 
Dot(
  Dot(
    Weight(Base relation: 
      {param0 := param0:246
       param1 := param1:249
       param0@pos := type_err:256
       param1@pos := type_err:257
       param0@width := type_err:258
       param1@width := type_err:259}    )
    ,
    Var(43)
  )
  ,
  Weight(Base relation: 
    {return := (return:14 mod 256)
     return@pos := type_err:250
     return@width := type_err:251}  )
)


New-style (IRE) regular expression in IREregExpMap for reID=43: 
Weight(Base relation: 
  {i := i':358
   s := s':359
   k := param1:249
   return := s':359
   return@pos := type_err:361
   return@width := type_err:362
   when ((!(0 <= K:354) \/ mid_i:355 = K:354)
           /\ (!(0 <= K:354)
                 \/ (-256 * mid_s:356) <= ((-256 * param0:246)
                                             + (-255 * K:354)))
           /\ ((K:354 = 0 /\ param0:246 = mid_s:356 /\ 0 = mid_i:355)
                 \/ (1 <= K:354
                       /\ 0 <= (-param0:246
                                  + (-256 * floor((-1/256 * param0:246))))
                       /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                       /\ 0 <= floor((-1/256 * param0:246))
                       /\ 0 <= (255 + param0:246
                                  + (256 * floor((-1/256 * param0:246))))
                       /\ 0 <= -mid_s:356 /\ 0 <= (-1 + mid_i:355)
                       /\ 0 <= (param1:249 + -mid_i:355)))
           /\ (0 = K:354 \/ !(-param0:246 <= 0))
           /\ (!(0 <= K:357) \/ i':358 = (mid_i:355 + K:357))
           /\ (!(0 <= K:357) \/ s':359 <= mid_s:356)
           /\ ((K:357 = 0 /\ mid_s:356 = s':359 /\ mid_i:355 = i':358)
                 \/ (1 <= K:357 /\ 0 <= (-1 + -mid_i:355 + param1:249)
                       /\ 0 <= (255 + -mid_s:356
                                  + (256 * floor((1/256 * mid_s:356))))
                       /\ 0 <= floor((1/256 * mid_s:356))
                       /\ 0 <= (mid_s:356
                                  + (-256 * floor((1/256 * mid_s:356))))
                       /\ 0 <= mid_i:355 /\ 0 <= (-1 + i':358) /\ 0 <= s':359
                       /\ 0 <= (param1:249 + -i':358)))
           /\ (0 = K:357 \/ -mid_s:356 <= 0) /\ (K:354 + K:357) = K:360
           /\ 0 <= K:360 /\ 0 <= i':358 /\ param1:249 <= i':358)})



Performing Gaussian Elimination.


  ------------------------------ 
Working on variable 7
  New-style (IRE) regular expression for 7 just before isolating it: 

Project(
  Dot(
    Dot(
      Weight(Base relation: 
        {password_binval := havoc:15
         guess_binval := havoc:0
         when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
                 /\ havoc:15 < 16777216)}      )
      ,
      Var(31)
    )
    ,
    Weight(Base relation: 
      {result := return:14
       return := havoc:363
       return@pos := type_err:364
       return@width := type_err:365}    )
  )
)



  ------------------------------ 
Working on variable 31
  New-style (IRE) regular expression for 31 just before isolating it: 

Project(
  Dot(
    Plus(
      Plus(
        Dot(
          Dot(
            Dot(
              Dot(
                Weight(Base relation: 
                  {param0 := password_binval:5
                   param1 := 2
                   param0@pos := type_err:93
                   param1@pos := type_err:95
                   param0@width := type_err:94
                   param1@width := type_err:96
                   when (0 <= guess_binval:4 /\ 0 <= password_binval:5)}                )
                ,
                Var(37)
              )
              ,
              Weight(Base relation: 
                {tmp := return:14
                 param0 := guess_binval:4
                 param1 := 2
                 param0@pos := type_err:97
                 param1@pos := type_err:99
                 param0@width := type_err:98
                 param1@width := type_err:100}              )
            )
            ,
            Var(37)
          )
          ,
          Weight(Base relation: 
            {tmp___0 := return:14
             __retres7 := 0
             when (tmp:34 < return:14 \/ return:14 < tmp:34)}          )
        )
        ,
        Dot(
          Dot(
            Dot(
              Dot(
                Dot(
                  Dot(
                    Dot(
                      Dot(
                        Weight(Base relation: 
                          {param0 := password_binval:5
                           param1 := 2
                           param0@pos := type_err:93
                           param1@pos := type_err:95
                           param0@width := type_err:94
                           param1@width := type_err:96
                           when (0 <= guess_binval:4
                                   /\ 0 <= password_binval:5)}                        )
                        ,
                        Var(37)
                      )
                      ,
                      Weight(Base relation: 
                        {tmp := return:14
                         param0 := guess_binval:4
                         param1 := 2
                         param0@pos := type_err:97
                         param1@pos := type_err:99
                         param0@width := type_err:98
                         param1@width := type_err:100}                      )
                    )
                    ,
                    Var(37)
                  )
                  ,
                  Weight(Base relation: 
                    {tmp___0 := return:14
                     param0 := password_binval:5
                     param1 := 1
                     param0@pos := type_err:331
                     param1@pos := type_err:332
                     param0@width := type_err:333
                     param1@width := type_err:334
                     when (return:14 <= tmp:34 /\ tmp:34 <= return:14)}                  )
                )
                ,
                Var(37)
              )
              ,
              Weight(Base relation: 
                {tmp___1 := return:14
                 param0 := guess_binval:4
                 param1 := 1
                 param0@pos := type_err:113
                 param1@pos := type_err:115
                 param0@width := type_err:114
                 param1@width := type_err:116}              )
            )
            ,
            Var(37)
          )
          ,
          Weight(Base relation: 
            {tmp___2 := return:14
             __retres7 := 1
             when (tmp___1:36 < return:14 \/ return:14 < tmp___1:36)}          )
        )
      )
      ,
      Dot(
        Dot(
          Dot(
            Dot(
              Dot(
                Dot(
                  Dot(
                    Dot(
                      Dot(
                        Dot(
                          Dot(
                            Dot(
                              Weight(Base relation: 
                                {param0 := password_binval:5
                                 param1 := 2
                                 param0@pos := type_err:93
                                 param1@pos := type_err:95
                                 param0@width := type_err:94
                                 param1@width := type_err:96
                                 when (0 <= guess_binval:4
                                         /\ 0 <= password_binval:5)}                              )
                              ,
                              Var(37)
                            )
                            ,
                            Weight(Base relation: 
                              {tmp := return:14
                               param0 := guess_binval:4
                               param1 := 2
                               param0@pos := type_err:97
                               param1@pos := type_err:99
                               param0@width := type_err:98
                               param1@width := type_err:100}                            )
                          )
                          ,
                          Var(37)
                        )
                        ,
                        Weight(Base relation: 
                          {tmp___0 := return:14
                           param0 := password_binval:5
                           param1 := 1
                           param0@pos := type_err:331
                           param1@pos := type_err:332
                           param0@width := type_err:333
                           param1@width := type_err:334
                           when (return:14 <= tmp:34 /\ tmp:34 <= return:14)}                        )
                      )
                      ,
                      Var(37)
                    )
                    ,
                    Weight(Base relation: 
                      {tmp___1 := return:14
                       param0 := guess_binval:4
                       param1 := 1
                       param0@pos := type_err:113
                       param1@pos := type_err:115
                       param0@width := type_err:114
                       param1@width := type_err:116}                    )
                  )
                  ,
                  Var(37)
                )
                ,
                Weight(Base relation: 
                  {tmp___2 := return:14
                   param0 := password_binval:5
                   param1 := 0
                   param0@pos := type_err:335
                   param1@pos := type_err:336
                   param0@width := type_err:337
                   param1@width := type_err:338
                   when (return:14 <= tmp___1:36 /\ tmp___1:36 <= return:14)}                )
              )
              ,
              Var(37)
            )
            ,
            Weight(Base relation: 
              {tmp___3 := return:14
               param0 := guess_binval:4
               param1 := 0
               param0@pos := type_err:109
               param1@pos := type_err:111
               param0@width := type_err:110
               param1@width := type_err:112}            )
          )
          ,
          Var(37)
        )
        ,
        Weight(Base relation: 
          {__retres7 := phi___retres7:117
           when (((tmp___3:38 < return:14 \/ return:14 < tmp___3:38)
                    /\ 2 = phi___retres7:117)
                   \/ (return:14 <= tmp___3:38 /\ tmp___3:38 <= return:14
                         /\ 3 = phi___retres7:117))}        )
      )
    )
    ,
    Weight(Base relation: 
      {return := __retres7:39
       return@pos := type_err:42
       return@width := type_err:43}    )
  )
)



  ------------------------------ 
Working on variable 37
  New-style (IRE) regular expression for 37 just before isolating it: 

Project(
  Dot(
    Dot(
      Weight(Base relation: 
        {param0 := param0:246
         param1 := param1:249
         param0@pos := type_err:256
         param1@pos := type_err:257
         param0@width := type_err:258
         param1@width := type_err:259}      )
      ,
      Var(43)
    )
    ,
    Weight(Base relation: 
      {return := (return:14 mod 256)
       return@pos := type_err:250
       return@width := type_err:251}    )
  )
)



  ------------------------------ 
Working on variable 43
  New-style (IRE) regular expression for 43 just before isolating it: 

Weight(Base relation: 
  {return := s':359
   return@pos := type_err:361
   return@width := type_err:362
   when ((!(0 <= K:354) \/ mid_i:355 = K:354)
           /\ (!(0 <= K:354)
                 \/ (-256 * mid_s:356) <= ((-256 * param0:246)
                                             + (-255 * K:354)))
           /\ ((K:354 = 0 /\ param0:246 = mid_s:356 /\ 0 = mid_i:355)
                 \/ (1 <= K:354
                       /\ 0 <= (-param0:246
                                  + (-256 * floor((-1/256 * param0:246))))
                       /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                       /\ 0 <= floor((-1/256 * param0:246))
                       /\ 0 <= (255 + param0:246
                                  + (256 * floor((-1/256 * param0:246))))
                       /\ 0 <= -mid_s:356 /\ 0 <= (-1 + mid_i:355)
                       /\ 0 <= (param1:249 + -mid_i:355)))
           /\ (0 = K:354 \/ !(-param0:246 <= 0))
           /\ (!(0 <= K:357) \/ i':358 = (mid_i:355 + K:357))
           /\ (!(0 <= K:357) \/ s':359 <= mid_s:356)
           /\ ((K:357 = 0 /\ mid_s:356 = s':359 /\ mid_i:355 = i':358)
                 \/ (1 <= K:357 /\ 0 <= (-1 + -mid_i:355 + param1:249)
                       /\ 0 <= (255 + -mid_s:356
                                  + (256 * floor((1/256 * mid_s:356))))
                       /\ 0 <= floor((1/256 * mid_s:356))
                       /\ 0 <= (mid_s:356
                                  + (-256 * floor((1/256 * mid_s:356))))
                       /\ 0 <= mid_i:355 /\ 0 <= (-1 + i':358) /\ 0 <= s':359
                       /\ 0 <= (param1:249 + -i':358)))
           /\ (0 = K:357 \/ -mid_s:356 <= 0) /\ (K:354 + K:357) = K:360
           /\ 0 <= K:360 /\ 0 <= i':358 /\ param1:249 <= i':358)})



 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  


Finished Gaussian Elimination.

New-style (IRE) regular expression in IREregExpsAfterIsolation for reID=7: 
Weight(Base relation: 
  {result := phi___retres7:798
   password_binval := havoc:15
   guess_binval := havoc:0
   return := havoc:858
   param0 := havoc:0
   param1 := phi_param1:800
   return@pos := type_err:859
   param0@pos := phi_param0@pos:802
   param1@pos := phi_param1@pos:803
   return@width := type_err:860
   param0@width := phi_param0@width:805
   param1@width := phi_param1@width:806
   when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
           /\ havoc:15 < 16777216
           /\ ((((0 <= havoc:0 /\ 0 <= havoc:15
                    /\ (!(0 <= K:723) \/ mid_i:724 = K:723)
                    /\ (!(0 <= K:723)
                          \/ (-256 * mid_s:725) <= ((-256 * havoc:15)
                                                      + (-255 * K:723)))
                    /\ ((K:723 = 0 /\ havoc:15 = mid_s:725 /\ 0 = mid_i:724)
                          \/ (1 <= K:723
                                /\ 0 <= (-havoc:15
                                           + (-256
                                                * floor((-1/256 * havoc:15))))
                                /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                /\ 0 <= floor((-1/256 * havoc:15))
                                /\ 0 <= (255 + havoc:15
                                           + (256
                                                * floor((-1/256 * havoc:15))))
                                /\ 0 <= -mid_s:725 /\ 0 <= (-1 + mid_i:724)
                                /\ 0 <= (2 + -mid_i:724)))
                    /\ (0 = K:723 \/ !(-havoc:15 <= 0))
                    /\ (!(0 <= K:726) \/ i':727 = (mid_i:724 + K:726))
                    /\ (!(0 <= K:726) \/ s':728 <= mid_s:725)
                    /\ ((K:726 = 0 /\ mid_s:725 = s':728
                           /\ mid_i:724 = i':727)
                          \/ (1 <= K:726 /\ 0 <= (-1 + -mid_i:724 + 2)
                                /\ 0 <= (255 + -mid_s:725
                                           + (256
                                                * floor((1/256 * mid_s:725))))
                                /\ 0 <= floor((1/256 * mid_s:725))
                                /\ 0 <= (mid_s:725
                                           + (-256
                                                * floor((1/256 * mid_s:725))))
                                /\ 0 <= mid_i:724 /\ 0 <= (-1 + i':727)
                                /\ 0 <= s':728 /\ 0 <= (2 + -i':727)))
                    /\ (0 = K:726 \/ -mid_s:725 <= 0)
                    /\ (K:723 + K:726) = K:729 /\ 0 <= K:729 /\ 0 <= i':727
                    /\ 2 <= i':727 /\ (!(0 <= K:730) \/ mid_i:731 = K:730)
                    /\ (!(0 <= K:730)
                          \/ (-256 * mid_s:732) <= ((-256 * havoc:0)
                                                      + (-255 * K:730)))
                    /\ ((K:730 = 0 /\ havoc:0 = mid_s:732 /\ 0 = mid_i:731)
                          \/ (1 <= K:730
                                /\ 0 <= (-havoc:0
                                           + (-256
                                                * floor((-1/256 * havoc:0))))
                                /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                /\ 0 <= floor((-1/256 * havoc:0))
                                /\ 0 <= (255 + havoc:0
                                           + (256 * floor((-1/256 * havoc:0))))
                                /\ 0 <= -mid_s:732 /\ 0 <= (-1 + mid_i:731)
                                /\ 0 <= (2 + -mid_i:731)))
                    /\ (0 = K:730 \/ !(-havoc:0 <= 0))
                    /\ (!(0 <= K:733) \/ i':734 = (mid_i:731 + K:733))
                    /\ (!(0 <= K:733) \/ s':735 <= mid_s:732)
                    /\ ((K:733 = 0 /\ mid_s:732 = s':735
                           /\ mid_i:731 = i':734)
                          \/ (1 <= K:733 /\ 0 <= (-1 + -mid_i:731 + 2)
                                /\ 0 <= (255 + -mid_s:732
                                           + (256
                                                * floor((1/256 * mid_s:732))))
                                /\ 0 <= floor((1/256 * mid_s:732))
                                /\ 0 <= (mid_s:732
                                           + (-256
                                                * floor((1/256 * mid_s:732))))
                                /\ 0 <= mid_i:731 /\ 0 <= (-1 + i':734)
                                /\ 0 <= s':735 /\ 0 <= (2 + -i':734)))
                    /\ (0 = K:733 \/ -mid_s:732 <= 0)
                    /\ (K:730 + K:733) = K:736 /\ 0 <= K:736 /\ 0 <= i':734
                    /\ 2 <= i':734
                    /\ ((s':728 mod 256) < (s':735 mod 256)
                          \/ (s':735 mod 256) < (s':728 mod 256))
                    /\ (s':728 mod 256) = phi_tmp:737
                    /\ (s':735 mod 256) = phi_tmp___0:738
                    /\ tmp___1:739 = phi_tmp___1:740
                    /\ tmp___2:741 = phi_tmp___2:742 /\ 0 = phi___retres7:743
                    /\ (s':735 mod 256) = phi_return:744
                    /\ 2 = phi_param1:745
                    /\ type_err:746 = phi_return@pos:747
                    /\ type_err:748 = phi_param0@pos:749
                    /\ type_err:750 = phi_param1@pos:751
                    /\ type_err:752 = phi_return@width:753
                    /\ type_err:754 = phi_param0@width:755
                    /\ type_err:756 = phi_param1@width:757)
                   \/ (0 <= havoc:0 /\ 0 <= havoc:15
                         /\ (!(0 <= K:758) \/ mid_i:759 = K:758)
                         /\ (!(0 <= K:758)
                               \/ (-256 * mid_s:760) <= ((-256 * havoc:15)
                                                           + (-255 * K:758)))
                         /\ ((K:758 = 0 /\ havoc:15 = mid_s:760
                                /\ 0 = mid_i:759)
                               \/ (1 <= K:758
                                     /\ 0 <= (-havoc:15
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= (-1 + -havoc:15)
                                     /\ 0 <= (-1 + 2)
                                     /\ 0 <= floor((-1/256 * havoc:15))
                                     /\ 0 <= (255 + havoc:15
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= -mid_s:760
                                     /\ 0 <= (-1 + mid_i:759)
                                     /\ 0 <= (2 + -mid_i:759)))
                         /\ (0 = K:758 \/ !(-havoc:15 <= 0))
                         /\ (!(0 <= K:761) \/ i':762 = (mid_i:759 + K:761))
                         /\ (!(0 <= K:761) \/ s':763 <= mid_s:760)
                         /\ ((K:761 = 0 /\ mid_s:760 = s':763
                                /\ mid_i:759 = i':762)
                               \/ (1 <= K:761 /\ 0 <= (-1 + -mid_i:759 + 2)
                                     /\ 0 <= (255 + -mid_s:760
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:760))))
                                     /\ 0 <= floor((1/256 * mid_s:760))
                                     /\ 0 <= (mid_s:760
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:760))))
                                     /\ 0 <= mid_i:759 /\ 0 <= (-1 + i':762)
                                     /\ 0 <= s':763 /\ 0 <= (2 + -i':762)))
                         /\ (0 = K:761 \/ -mid_s:760 <= 0)
                         /\ (K:758 + K:761) = K:764 /\ 0 <= K:764
                         /\ 0 <= i':762 /\ 2 <= i':762
                         /\ (!(0 <= K:765) \/ mid_i:766 = K:765)
                         /\ (!(0 <= K:765)
                               \/ (-256 * mid_s:767) <= ((-256 * havoc:0)
                                                           + (-255 * K:765)))
                         /\ ((K:765 = 0 /\ havoc:0 = mid_s:767
                                /\ 0 = mid_i:766)
                               \/ (1 <= K:765
                                     /\ 0 <= (-havoc:0
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                     /\ 0 <= floor((-1/256 * havoc:0))
                                     /\ 0 <= (255 + havoc:0
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= -mid_s:767
                                     /\ 0 <= (-1 + mid_i:766)
                                     /\ 0 <= (2 + -mid_i:766)))
                         /\ (0 = K:765 \/ !(-havoc:0 <= 0))
                         /\ (!(0 <= K:768) \/ i':769 = (mid_i:766 + K:768))
                         /\ (!(0 <= K:768) \/ s':770 <= mid_s:767)
                         /\ ((K:768 = 0 /\ mid_s:767 = s':770
                                /\ mid_i:766 = i':769)
                               \/ (1 <= K:768 /\ 0 <= (-1 + -mid_i:766 + 2)
                                     /\ 0 <= (255 + -mid_s:767
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:767))))
                                     /\ 0 <= floor((1/256 * mid_s:767))
                                     /\ 0 <= (mid_s:767
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:767))))
                                     /\ 0 <= mid_i:766 /\ 0 <= (-1 + i':769)
                                     /\ 0 <= s':770 /\ 0 <= (2 + -i':769)))
                         /\ (0 = K:768 \/ -mid_s:767 <= 0)
                         /\ (K:765 + K:768) = K:771 /\ 0 <= K:771
                         /\ 0 <= i':769 /\ 2 <= i':769
                         /\ (s':770 mod 256) <= (s':763 mod 256)
                         /\ (s':763 mod 256) <= (s':770 mod 256)
                         /\ (!(0 <= K:772) \/ mid_i:773 = K:772)
                         /\ (!(0 <= K:772)
                               \/ (-256 * mid_s:774) <= ((-256 * havoc:15)
                                                           + (-255 * K:772)))
                         /\ ((K:772 = 0 /\ havoc:15 = mid_s:774
                                /\ 0 = mid_i:773)
                               \/ (1 <= K:772
                                     /\ 0 <= (-havoc:15
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= (-1 + -havoc:15)
                                     /\ 0 <= (-1 + 1)
                                     /\ 0 <= floor((-1/256 * havoc:15))
                                     /\ 0 <= (255 + havoc:15
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= -mid_s:774
                                     /\ 0 <= (-1 + mid_i:773)
                                     /\ 0 <= (1 + -mid_i:773)))
                         /\ (0 = K:772 \/ !(-havoc:15 <= 0))
                         /\ (!(0 <= K:775) \/ i':776 = (mid_i:773 + K:775))
                         /\ (!(0 <= K:775) \/ s':777 <= mid_s:774)
                         /\ ((K:775 = 0 /\ mid_s:774 = s':777
                                /\ mid_i:773 = i':776)
                               \/ (1 <= K:775 /\ 0 <= (-1 + -mid_i:773 + 1)
                                     /\ 0 <= (255 + -mid_s:774
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:774))))
                                     /\ 0 <= floor((1/256 * mid_s:774))
                                     /\ 0 <= (mid_s:774
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:774))))
                                     /\ 0 <= mid_i:773 /\ 0 <= (-1 + i':776)
                                     /\ 0 <= s':777 /\ 0 <= (1 + -i':776)))
                         /\ (0 = K:775 \/ -mid_s:774 <= 0)
                         /\ (K:772 + K:775) = K:778 /\ 0 <= K:778
                         /\ 0 <= i':776 /\ 1 <= i':776
                         /\ (!(0 <= K:779) \/ mid_i:780 = K:779)
                         /\ (!(0 <= K:779)
                               \/ (-256 * mid_s:781) <= ((-256 * havoc:0)
                                                           + (-255 * K:779)))
                         /\ ((K:779 = 0 /\ havoc:0 = mid_s:781
                                /\ 0 = mid_i:780)
                               \/ (1 <= K:779
                                     /\ 0 <= (-havoc:0
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                     /\ 0 <= floor((-1/256 * havoc:0))
                                     /\ 0 <= (255 + havoc:0
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= -mid_s:781
                                     /\ 0 <= (-1 + mid_i:780)
                                     /\ 0 <= (1 + -mid_i:780)))
                         /\ (0 = K:779 \/ !(-havoc:0 <= 0))
                         /\ (!(0 <= K:782) \/ i':783 = (mid_i:780 + K:782))
                         /\ (!(0 <= K:782) \/ s':784 <= mid_s:781)
                         /\ ((K:782 = 0 /\ mid_s:781 = s':784
                                /\ mid_i:780 = i':783)
                               \/ (1 <= K:782 /\ 0 <= (-1 + -mid_i:780 + 1)
                                     /\ 0 <= (255 + -mid_s:781
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:781))))
                                     /\ 0 <= floor((1/256 * mid_s:781))
                                     /\ 0 <= (mid_s:781
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:781))))
                                     /\ 0 <= mid_i:780 /\ 0 <= (-1 + i':783)
                                     /\ 0 <= s':784 /\ 0 <= (1 + -i':783)))
                         /\ (0 = K:782 \/ -mid_s:781 <= 0)
                         /\ (K:779 + K:782) = K:785 /\ 0 <= K:785
                         /\ 0 <= i':783 /\ 1 <= i':783
                         /\ ((s':777 mod 256) < (s':784 mod 256)
                               \/ (s':784 mod 256) < (s':777 mod 256))
                         /\ (s':763 mod 256) = phi_tmp:737
                         /\ (s':770 mod 256) = phi_tmp___0:738
                         /\ (s':777 mod 256) = phi_tmp___1:740
                         /\ (s':784 mod 256) = phi_tmp___2:742
                         /\ 1 = phi___retres7:743
                         /\ (s':784 mod 256) = phi_return:744
                         /\ 1 = phi_param1:745
                         /\ type_err:786 = phi_return@pos:747
                         /\ type_err:787 = phi_param0@pos:749
                         /\ type_err:788 = phi_param1@pos:751
                         /\ type_err:789 = phi_return@width:753
                         /\ type_err:790 = phi_param0@width:755
                         /\ type_err:791 = phi_param1@width:757))
                  /\ phi_tmp:737 = phi_tmp:792
                  /\ phi_tmp___0:738 = phi_tmp___0:793
                  /\ phi_tmp___1:740 = phi_tmp___1:794
                  /\ phi_tmp___2:742 = phi_tmp___2:795
                  /\ tmp___3:796 = phi_tmp___3:797
                  /\ phi___retres7:743 = phi___retres7:798
                  /\ phi_return:744 = phi_return:799
                  /\ phi_param1:745 = phi_param1:800
                  /\ phi_return@pos:747 = phi_return@pos:801
                  /\ phi_param0@pos:749 = phi_param0@pos:802
                  /\ phi_param1@pos:751 = phi_param1@pos:803
                  /\ phi_return@width:753 = phi_return@width:804
                  /\ phi_param0@width:755 = phi_param0@width:805
                  /\ phi_param1@width:757 = phi_param1@width:806)
                 \/ (0 <= havoc:0 /\ 0 <= havoc:15
                       /\ (!(0 <= K:807) \/ mid_i:808 = K:807)
                       /\ (!(0 <= K:807)
                             \/ (-256 * mid_s:809) <= ((-256 * havoc:15)
                                                         + (-255 * K:807)))
                       /\ ((K:807 = 0 /\ havoc:15 = mid_s:809
                              /\ 0 = mid_i:808)
                             \/ (1 <= K:807
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:809
                                   /\ 0 <= (-1 + mid_i:808)
                                   /\ 0 <= (2 + -mid_i:808)))
                       /\ (0 = K:807 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:810) \/ i':811 = (mid_i:808 + K:810))
                       /\ (!(0 <= K:810) \/ s':812 <= mid_s:809)
                       /\ ((K:810 = 0 /\ mid_s:809 = s':812
                              /\ mid_i:808 = i':811)
                             \/ (1 <= K:810 /\ 0 <= (-1 + -mid_i:808 + 2)
                                   /\ 0 <= (255 + -mid_s:809
                                              + (256
                                                   * floor((1/256 * mid_s:809))))
                                   /\ 0 <= floor((1/256 * mid_s:809))
                                   /\ 0 <= (mid_s:809
                                              + (-256
                                                   * floor((1/256 * mid_s:809))))
                                   /\ 0 <= mid_i:808 /\ 0 <= (-1 + i':811)
                                   /\ 0 <= s':812 /\ 0 <= (2 + -i':811)))
                       /\ (0 = K:810 \/ -mid_s:809 <= 0)
                       /\ (K:807 + K:810) = K:813 /\ 0 <= K:813
                       /\ 0 <= i':811 /\ 2 <= i':811
                       /\ (!(0 <= K:814) \/ mid_i:815 = K:814)
                       /\ (!(0 <= K:814)
                             \/ (-256 * mid_s:816) <= ((-256 * havoc:0)
                                                         + (-255 * K:814)))
                       /\ ((K:814 = 0 /\ havoc:0 = mid_s:816 /\ 0 = mid_i:815)
                             \/ (1 <= K:814
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:816
                                   /\ 0 <= (-1 + mid_i:815)
                                   /\ 0 <= (2 + -mid_i:815)))
                       /\ (0 = K:814 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:817) \/ i':818 = (mid_i:815 + K:817))
                       /\ (!(0 <= K:817) \/ s':819 <= mid_s:816)
                       /\ ((K:817 = 0 /\ mid_s:816 = s':819
                              /\ mid_i:815 = i':818)
                             \/ (1 <= K:817 /\ 0 <= (-1 + -mid_i:815 + 2)
                                   /\ 0 <= (255 + -mid_s:816
                                              + (256
                                                   * floor((1/256 * mid_s:816))))
                                   /\ 0 <= floor((1/256 * mid_s:816))
                                   /\ 0 <= (mid_s:816
                                              + (-256
                                                   * floor((1/256 * mid_s:816))))
                                   /\ 0 <= mid_i:815 /\ 0 <= (-1 + i':818)
                                   /\ 0 <= s':819 /\ 0 <= (2 + -i':818)))
                       /\ (0 = K:817 \/ -mid_s:816 <= 0)
                       /\ (K:814 + K:817) = K:820 /\ 0 <= K:820
                       /\ 0 <= i':818 /\ 2 <= i':818
                       /\ (s':819 mod 256) <= (s':812 mod 256)
                       /\ (s':812 mod 256) <= (s':819 mod 256)
                       /\ (!(0 <= K:821) \/ mid_i:822 = K:821)
                       /\ (!(0 <= K:821)
                             \/ (-256 * mid_s:823) <= ((-256 * havoc:15)
                                                         + (-255 * K:821)))
                       /\ ((K:821 = 0 /\ havoc:15 = mid_s:823
                              /\ 0 = mid_i:822)
                             \/ (1 <= K:821
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:823
                                   /\ 0 <= (-1 + mid_i:822)
                                   /\ 0 <= (1 + -mid_i:822)))
                       /\ (0 = K:821 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:824) \/ i':825 = (mid_i:822 + K:824))
                       /\ (!(0 <= K:824) \/ s':826 <= mid_s:823)
                       /\ ((K:824 = 0 /\ mid_s:823 = s':826
                              /\ mid_i:822 = i':825)
                             \/ (1 <= K:824 /\ 0 <= (-1 + -mid_i:822 + 1)
                                   /\ 0 <= (255 + -mid_s:823
                                              + (256
                                                   * floor((1/256 * mid_s:823))))
                                   /\ 0 <= floor((1/256 * mid_s:823))
                                   /\ 0 <= (mid_s:823
                                              + (-256
                                                   * floor((1/256 * mid_s:823))))
                                   /\ 0 <= mid_i:822 /\ 0 <= (-1 + i':825)
                                   /\ 0 <= s':826 /\ 0 <= (1 + -i':825)))
                       /\ (0 = K:824 \/ -mid_s:823 <= 0)
                       /\ (K:821 + K:824) = K:827 /\ 0 <= K:827
                       /\ 0 <= i':825 /\ 1 <= i':825
                       /\ (!(0 <= K:828) \/ mid_i:829 = K:828)
                       /\ (!(0 <= K:828)
                             \/ (-256 * mid_s:830) <= ((-256 * havoc:0)
                                                         + (-255 * K:828)))
                       /\ ((K:828 = 0 /\ havoc:0 = mid_s:830 /\ 0 = mid_i:829)
                             \/ (1 <= K:828
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:830
                                   /\ 0 <= (-1 + mid_i:829)
                                   /\ 0 <= (1 + -mid_i:829)))
                       /\ (0 = K:828 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:831) \/ i':832 = (mid_i:829 + K:831))
                       /\ (!(0 <= K:831) \/ s':833 <= mid_s:830)
                       /\ ((K:831 = 0 /\ mid_s:830 = s':833
                              /\ mid_i:829 = i':832)
                             \/ (1 <= K:831 /\ 0 <= (-1 + -mid_i:829 + 1)
                                   /\ 0 <= (255 + -mid_s:830
                                              + (256
                                                   * floor((1/256 * mid_s:830))))
                                   /\ 0 <= floor((1/256 * mid_s:830))
                                   /\ 0 <= (mid_s:830
                                              + (-256
                                                   * floor((1/256 * mid_s:830))))
                                   /\ 0 <= mid_i:829 /\ 0 <= (-1 + i':832)
                                   /\ 0 <= s':833 /\ 0 <= (1 + -i':832)))
                       /\ (0 = K:831 \/ -mid_s:830 <= 0)
                       /\ (K:828 + K:831) = K:834 /\ 0 <= K:834
                       /\ 0 <= i':832 /\ 1 <= i':832
                       /\ (s':833 mod 256) <= (s':826 mod 256)
                       /\ (s':826 mod 256) <= (s':833 mod 256)
                       /\ (!(0 <= K:835) \/ mid_i:836 = K:835)
                       /\ (!(0 <= K:835)
                             \/ (-256 * mid_s:837) <= ((-256 * havoc:15)
                                                         + (-255 * K:835)))
                       /\ K:835 = 0 /\ havoc:15 = mid_s:837 /\ 0 = mid_i:836
                       /\ (0 = K:835 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:838) \/ i':839 = (mid_i:836 + K:838))
                       /\ (!(0 <= K:838) \/ s':840 <= mid_s:837)
                       /\ ((K:838 = 0 /\ mid_s:837 = s':840
                              /\ mid_i:836 = i':839)
                             \/ (1 <= K:838 /\ 0 <= (-1 + -mid_i:836)
                                   /\ 0 <= (255 + -mid_s:837
                                              + (256
                                                   * floor((1/256 * mid_s:837))))
                                   /\ 0 <= floor((1/256 * mid_s:837))
                                   /\ 0 <= (mid_s:837
                                              + (-256
                                                   * floor((1/256 * mid_s:837))))
                                   /\ 0 <= mid_i:836 /\ 0 <= (-1 + i':839)
                                   /\ 0 <= s':840 /\ 0 <= -i':839))
                       /\ (0 = K:838 \/ -mid_s:837 <= 0)
                       /\ (K:835 + K:838) = K:841 /\ 0 <= K:841
                       /\ 0 <= i':839 /\ 0 <= i':839
                       /\ (!(0 <= K:842) \/ mid_i:843 = K:842)
                       /\ (!(0 <= K:842)
                             \/ (-256 * mid_s:844) <= ((-256 * havoc:0)
                                                         + (-255 * K:842)))
                       /\ K:842 = 0 /\ havoc:0 = mid_s:844 /\ 0 = mid_i:843
                       /\ (0 = K:842 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:845) \/ i':846 = (mid_i:843 + K:845))
                       /\ (!(0 <= K:845) \/ s':847 <= mid_s:844)
                       /\ ((K:845 = 0 /\ mid_s:844 = s':847
                              /\ mid_i:843 = i':846)
                             \/ (1 <= K:845 /\ 0 <= (-1 + -mid_i:843)
                                   /\ 0 <= (255 + -mid_s:844
                                              + (256
                                                   * floor((1/256 * mid_s:844))))
                                   /\ 0 <= floor((1/256 * mid_s:844))
                                   /\ 0 <= (mid_s:844
                                              + (-256
                                                   * floor((1/256 * mid_s:844))))
                                   /\ 0 <= mid_i:843 /\ 0 <= (-1 + i':846)
                                   /\ 0 <= s':847 /\ 0 <= -i':846))
                       /\ (0 = K:845 \/ -mid_s:844 <= 0)
                       /\ (K:842 + K:845) = K:848 /\ 0 <= K:848
                       /\ 0 <= i':846 /\ 0 <= i':846
                       /\ ((((s':840 mod 256) < (s':847 mod 256)
                               \/ (s':847 mod 256) < (s':840 mod 256))
                              /\ 2 = phi___retres7:849)
                             \/ ((s':847 mod 256) <= (s':840 mod 256)
                                   /\ (s':840 mod 256) <= (s':847 mod 256)
                                   /\ 3 = phi___retres7:849))
                       /\ (s':812 mod 256) = phi_tmp:792
                       /\ (s':819 mod 256) = phi_tmp___0:793
                       /\ (s':826 mod 256) = phi_tmp___1:794
                       /\ (s':833 mod 256) = phi_tmp___2:795
                       /\ (s':840 mod 256) = phi_tmp___3:797
                       /\ phi___retres7:849 = phi___retres7:798
                       /\ (s':847 mod 256) = phi_return:799
                       /\ 0 = phi_param1:800
                       /\ type_err:850 = phi_return@pos:801
                       /\ type_err:851 = phi_param0@pos:802
                       /\ type_err:852 = phi_param1@pos:803
                       /\ type_err:853 = phi_return@width:804
                       /\ type_err:854 = phi_param0@width:805
                       /\ type_err:855 = phi_param1@width:806)))})


New-style (IRE) regular expression in IREregExpsAfterIsolation for reID=31: 
Weight(Base relation: 
  {return := phi___retres7:1207
   param0 := guess_binval:4
   param1 := phi_param1:1205
   return@pos := type_err:1213
   param0@pos := phi_param0@pos:1203
   param1@pos := phi_param1@pos:1202
   return@width := type_err:1214
   param0@width := phi_param0@width:1200
   param1@width := phi_param1@width:1199
   when ((((0 <= guess_binval:4 /\ 0 <= password_binval:5
              /\ (!(0 <= K:1156) \/ mid_i:1157 = K:1156)
              /\ (!(0 <= K:1156)
                    \/ (-256 * mid_s:1158) <= ((-256 * password_binval:5)
                                                 + (-255 * K:1156)))
              /\ ((K:1156 = 0 /\ password_binval:5 = mid_s:1158
                     /\ 0 = mid_i:1157)
                    \/ (1 <= K:1156
                          /\ 0 <= (-password_binval:5
                                     + (-256
                                          * floor((-1/256 * password_binval:5))))
                          /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 2)
                          /\ 0 <= floor((-1/256 * password_binval:5))
                          /\ 0 <= (255 + password_binval:5
                                     + (256
                                          * floor((-1/256 * password_binval:5))))
                          /\ 0 <= -mid_s:1158 /\ 0 <= (-1 + mid_i:1157)
                          /\ 0 <= (2 + -mid_i:1157)))
              /\ (0 = K:1156 \/ !(-password_binval:5 <= 0))
              /\ (!(0 <= K:1159) \/ i':1160 = (mid_i:1157 + K:1159))
              /\ (!(0 <= K:1159) \/ s':1161 <= mid_s:1158)
              /\ ((K:1159 = 0 /\ mid_s:1158 = s':1161 /\ mid_i:1157 = i':1160)
                    \/ (1 <= K:1159 /\ 0 <= (-1 + -mid_i:1157 + 2)
                          /\ 0 <= (255 + -mid_s:1158
                                     + (256 * floor((1/256 * mid_s:1158))))
                          /\ 0 <= floor((1/256 * mid_s:1158))
                          /\ 0 <= (mid_s:1158
                                     + (-256 * floor((1/256 * mid_s:1158))))
                          /\ 0 <= mid_i:1157 /\ 0 <= (-1 + i':1160)
                          /\ 0 <= s':1161 /\ 0 <= (2 + -i':1160)))
              /\ (0 = K:1159 \/ -mid_s:1158 <= 0)
              /\ (K:1156 + K:1159) = K:1162 /\ 0 <= K:1162 /\ 0 <= i':1160
              /\ 2 <= i':1160 /\ (!(0 <= K:1173) \/ mid_i:1174 = K:1173)
              /\ (!(0 <= K:1173)
                    \/ (-256 * mid_s:1175) <= ((-256 * guess_binval:4)
                                                 + (-255 * K:1173)))
              /\ ((K:1173 = 0 /\ guess_binval:4 = mid_s:1175
                     /\ 0 = mid_i:1174)
                    \/ (1 <= K:1173
                          /\ 0 <= (-guess_binval:4
                                     + (-256
                                          * floor((-1/256 * guess_binval:4))))
                          /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                          /\ 0 <= floor((-1/256 * guess_binval:4))
                          /\ 0 <= (255 + guess_binval:4
                                     + (256
                                          * floor((-1/256 * guess_binval:4))))
                          /\ 0 <= -mid_s:1175 /\ 0 <= (-1 + mid_i:1174)
                          /\ 0 <= (2 + -mid_i:1174)))
              /\ (0 = K:1173 \/ !(-guess_binval:4 <= 0))
              /\ (!(0 <= K:1176) \/ i':1177 = (mid_i:1174 + K:1176))
              /\ (!(0 <= K:1176) \/ s':1178 <= mid_s:1175)
              /\ ((K:1176 = 0 /\ mid_s:1175 = s':1178 /\ mid_i:1174 = i':1177)
                    \/ (1 <= K:1176 /\ 0 <= (-1 + -mid_i:1174 + 2)
                          /\ 0 <= (255 + -mid_s:1175
                                     + (256 * floor((1/256 * mid_s:1175))))
                          /\ 0 <= floor((1/256 * mid_s:1175))
                          /\ 0 <= (mid_s:1175
                                     + (-256 * floor((1/256 * mid_s:1175))))
                          /\ 0 <= mid_i:1174 /\ 0 <= (-1 + i':1177)
                          /\ 0 <= s':1178 /\ 0 <= (2 + -i':1177)))
              /\ (0 = K:1176 \/ -mid_s:1175 <= 0)
              /\ (K:1173 + K:1176) = K:1179 /\ 0 <= K:1179 /\ 0 <= i':1177
              /\ 2 <= i':1177
              /\ ((s':1161 mod 256) < (s':1178 mod 256)
                    \/ (s':1178 mod 256) < (s':1161 mod 256))
              /\ (s':1161 mod 256) = phi_tmp:1198
              /\ (s':1178 mod 256) = phi_tmp___0:1197
              /\ tmp___1:1215 = phi_tmp___1:1196
              /\ tmp___2:1216 = phi_tmp___2:1195 /\ 0 = phi___retres7:1194
              /\ (s':1178 mod 256) = phi_return:1193 /\ 2 = phi_param1:1192
              /\ type_err:1180 = phi_return@pos:1191
              /\ type_err:1181 = phi_param0@pos:1190
              /\ type_err:1182 = phi_param1@pos:1189
              /\ type_err:1183 = phi_return@width:1188
              /\ type_err:1184 = phi_param0@width:1187
              /\ type_err:1185 = phi_param1@width:1186)
             \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                   /\ (!(0 <= K:1070) \/ mid_i:1071 = K:1070)
                   /\ (!(0 <= K:1070)
                         \/ (-256 * mid_s:1072) <= ((-256 * password_binval:5)
                                                      + (-255 * K:1070)))
                   /\ ((K:1070 = 0 /\ password_binval:5 = mid_s:1072
                          /\ 0 = mid_i:1071)
                         \/ (1 <= K:1070
                               /\ 0 <= (-password_binval:5
                                          + (-256
                                               * floor((-1/256
                                                          * password_binval:5))))
                               /\ 0 <= (-1 + -password_binval:5)
                               /\ 0 <= (-1 + 2)
                               /\ 0 <= floor((-1/256 * password_binval:5))
                               /\ 0 <= (255 + password_binval:5
                                          + (256
                                               * floor((-1/256
                                                          * password_binval:5))))
                               /\ 0 <= -mid_s:1072 /\ 0 <= (-1 + mid_i:1071)
                               /\ 0 <= (2 + -mid_i:1071)))
                   /\ (0 = K:1070 \/ !(-password_binval:5 <= 0))
                   /\ (!(0 <= K:1073) \/ i':1074 = (mid_i:1071 + K:1073))
                   /\ (!(0 <= K:1073) \/ s':1075 <= mid_s:1072)
                   /\ ((K:1073 = 0 /\ mid_s:1072 = s':1075
                          /\ mid_i:1071 = i':1074)
                         \/ (1 <= K:1073 /\ 0 <= (-1 + -mid_i:1071 + 2)
                               /\ 0 <= (255 + -mid_s:1072
                                          + (256
                                               * floor((1/256 * mid_s:1072))))
                               /\ 0 <= floor((1/256 * mid_s:1072))
                               /\ 0 <= (mid_s:1072
                                          + (-256
                                               * floor((1/256 * mid_s:1072))))
                               /\ 0 <= mid_i:1071 /\ 0 <= (-1 + i':1074)
                               /\ 0 <= s':1075 /\ 0 <= (2 + -i':1074)))
                   /\ (0 = K:1073 \/ -mid_s:1072 <= 0)
                   /\ (K:1070 + K:1073) = K:1076 /\ 0 <= K:1076
                   /\ 0 <= i':1074 /\ 2 <= i':1074
                   /\ (!(0 <= K:1087) \/ mid_i:1088 = K:1087)
                   /\ (!(0 <= K:1087)
                         \/ (-256 * mid_s:1089) <= ((-256 * guess_binval:4)
                                                      + (-255 * K:1087)))
                   /\ ((K:1087 = 0 /\ guess_binval:4 = mid_s:1089
                          /\ 0 = mid_i:1088)
                         \/ (1 <= K:1087
                               /\ 0 <= (-guess_binval:4
                                          + (-256
                                               * floor((-1/256
                                                          * guess_binval:4))))
                               /\ 0 <= (-1 + -guess_binval:4)
                               /\ 0 <= (-1 + 2)
                               /\ 0 <= floor((-1/256 * guess_binval:4))
                               /\ 0 <= (255 + guess_binval:4
                                          + (256
                                               * floor((-1/256
                                                          * guess_binval:4))))
                               /\ 0 <= -mid_s:1089 /\ 0 <= (-1 + mid_i:1088)
                               /\ 0 <= (2 + -mid_i:1088)))
                   /\ (0 = K:1087 \/ !(-guess_binval:4 <= 0))
                   /\ (!(0 <= K:1090) \/ i':1091 = (mid_i:1088 + K:1090))
                   /\ (!(0 <= K:1090) \/ s':1092 <= mid_s:1089)
                   /\ ((K:1090 = 0 /\ mid_s:1089 = s':1092
                          /\ mid_i:1088 = i':1091)
                         \/ (1 <= K:1090 /\ 0 <= (-1 + -mid_i:1088 + 2)
                               /\ 0 <= (255 + -mid_s:1089
                                          + (256
                                               * floor((1/256 * mid_s:1089))))
                               /\ 0 <= floor((1/256 * mid_s:1089))
                               /\ 0 <= (mid_s:1089
                                          + (-256
                                               * floor((1/256 * mid_s:1089))))
                               /\ 0 <= mid_i:1088 /\ 0 <= (-1 + i':1091)
                               /\ 0 <= s':1092 /\ 0 <= (2 + -i':1091)))
                   /\ (0 = K:1090 \/ -mid_s:1089 <= 0)
                   /\ (K:1087 + K:1090) = K:1093 /\ 0 <= K:1093
                   /\ 0 <= i':1091 /\ 2 <= i':1091
                   /\ (s':1092 mod 256) <= (s':1075 mod 256)
                   /\ (s':1075 mod 256) <= (s':1092 mod 256)
                   /\ (!(0 <= K:1104) \/ mid_i:1105 = K:1104)
                   /\ (!(0 <= K:1104)
                         \/ (-256 * mid_s:1106) <= ((-256 * password_binval:5)
                                                      + (-255 * K:1104)))
                   /\ ((K:1104 = 0 /\ password_binval:5 = mid_s:1106
                          /\ 0 = mid_i:1105)
                         \/ (1 <= K:1104
                               /\ 0 <= (-password_binval:5
                                          + (-256
                                               * floor((-1/256
                                                          * password_binval:5))))
                               /\ 0 <= (-1 + -password_binval:5)
                               /\ 0 <= (-1 + 1)
                               /\ 0 <= floor((-1/256 * password_binval:5))
                               /\ 0 <= (255 + password_binval:5
                                          + (256
                                               * floor((-1/256
                                                          * password_binval:5))))
                               /\ 0 <= -mid_s:1106 /\ 0 <= (-1 + mid_i:1105)
                               /\ 0 <= (1 + -mid_i:1105)))
                   /\ (0 = K:1104 \/ !(-password_binval:5 <= 0))
                   /\ (!(0 <= K:1107) \/ i':1108 = (mid_i:1105 + K:1107))
                   /\ (!(0 <= K:1107) \/ s':1109 <= mid_s:1106)
                   /\ ((K:1107 = 0 /\ mid_s:1106 = s':1109
                          /\ mid_i:1105 = i':1108)
                         \/ (1 <= K:1107 /\ 0 <= (-1 + -mid_i:1105 + 1)
                               /\ 0 <= (255 + -mid_s:1106
                                          + (256
                                               * floor((1/256 * mid_s:1106))))
                               /\ 0 <= floor((1/256 * mid_s:1106))
                               /\ 0 <= (mid_s:1106
                                          + (-256
                                               * floor((1/256 * mid_s:1106))))
                               /\ 0 <= mid_i:1105 /\ 0 <= (-1 + i':1108)
                               /\ 0 <= s':1109 /\ 0 <= (1 + -i':1108)))
                   /\ (0 = K:1107 \/ -mid_s:1106 <= 0)
                   /\ (K:1104 + K:1107) = K:1110 /\ 0 <= K:1110
                   /\ 0 <= i':1108 /\ 1 <= i':1108
                   /\ (!(0 <= K:1121) \/ mid_i:1122 = K:1121)
                   /\ (!(0 <= K:1121)
                         \/ (-256 * mid_s:1123) <= ((-256 * guess_binval:4)
                                                      + (-255 * K:1121)))
                   /\ ((K:1121 = 0 /\ guess_binval:4 = mid_s:1123
                          /\ 0 = mid_i:1122)
                         \/ (1 <= K:1121
                               /\ 0 <= (-guess_binval:4
                                          + (-256
                                               * floor((-1/256
                                                          * guess_binval:4))))
                               /\ 0 <= (-1 + -guess_binval:4)
                               /\ 0 <= (-1 + 1)
                               /\ 0 <= floor((-1/256 * guess_binval:4))
                               /\ 0 <= (255 + guess_binval:4
                                          + (256
                                               * floor((-1/256
                                                          * guess_binval:4))))
                               /\ 0 <= -mid_s:1123 /\ 0 <= (-1 + mid_i:1122)
                               /\ 0 <= (1 + -mid_i:1122)))
                   /\ (0 = K:1121 \/ !(-guess_binval:4 <= 0))
                   /\ (!(0 <= K:1124) \/ i':1125 = (mid_i:1122 + K:1124))
                   /\ (!(0 <= K:1124) \/ s':1126 <= mid_s:1123)
                   /\ ((K:1124 = 0 /\ mid_s:1123 = s':1126
                          /\ mid_i:1122 = i':1125)
                         \/ (1 <= K:1124 /\ 0 <= (-1 + -mid_i:1122 + 1)
                               /\ 0 <= (255 + -mid_s:1123
                                          + (256
                                               * floor((1/256 * mid_s:1123))))
                               /\ 0 <= floor((1/256 * mid_s:1123))
                               /\ 0 <= (mid_s:1123
                                          + (-256
                                               * floor((1/256 * mid_s:1123))))
                               /\ 0 <= mid_i:1122 /\ 0 <= (-1 + i':1125)
                               /\ 0 <= s':1126 /\ 0 <= (1 + -i':1125)))
                   /\ (0 = K:1124 \/ -mid_s:1123 <= 0)
                   /\ (K:1121 + K:1124) = K:1127 /\ 0 <= K:1127
                   /\ 0 <= i':1125 /\ 1 <= i':1125
                   /\ ((s':1109 mod 256) < (s':1126 mod 256)
                         \/ (s':1126 mod 256) < (s':1109 mod 256))
                   /\ (s':1075 mod 256) = phi_tmp:1198
                   /\ (s':1092 mod 256) = phi_tmp___0:1197
                   /\ (s':1109 mod 256) = phi_tmp___1:1196
                   /\ (s':1126 mod 256) = phi_tmp___2:1195
                   /\ 1 = phi___retres7:1194
                   /\ (s':1126 mod 256) = phi_return:1193
                   /\ 1 = phi_param1:1192
                   /\ type_err:1128 = phi_return@pos:1191
                   /\ type_err:1129 = phi_param0@pos:1190
                   /\ type_err:1130 = phi_param1@pos:1189
                   /\ type_err:1131 = phi_return@width:1188
                   /\ type_err:1132 = phi_param0@width:1187
                   /\ type_err:1133 = phi_param1@width:1186))
            /\ phi_tmp:1198 = phi_tmp:1212
            /\ phi_tmp___0:1197 = phi_tmp___0:1211
            /\ phi_tmp___1:1196 = phi_tmp___1:1210
            /\ phi_tmp___2:1195 = phi_tmp___2:1209
            /\ tmp___3:1217 = phi_tmp___3:1208
            /\ phi___retres7:1194 = phi___retres7:1207
            /\ phi_return:1193 = phi_return:1206
            /\ phi_param1:1192 = phi_param1:1205
            /\ phi_return@pos:1191 = phi_return@pos:1204
            /\ phi_param0@pos:1190 = phi_param0@pos:1203
            /\ phi_param1@pos:1189 = phi_param1@pos:1202
            /\ phi_return@width:1188 = phi_return@width:1201
            /\ phi_param0@width:1187 = phi_param0@width:1200
            /\ phi_param1@width:1186 = phi_param1@width:1199)
           \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                 /\ (!(0 <= K:927) \/ mid_i:928 = K:927)
                 /\ (!(0 <= K:927)
                       \/ (-256 * mid_s:929) <= ((-256 * password_binval:5)
                                                   + (-255 * K:927)))
                 /\ ((K:927 = 0 /\ password_binval:5 = mid_s:929
                        /\ 0 = mid_i:928)
                       \/ (1 <= K:927
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:929 /\ 0 <= (-1 + mid_i:928)
                             /\ 0 <= (2 + -mid_i:928)))
                 /\ (0 = K:927 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:930) \/ i':931 = (mid_i:928 + K:930))
                 /\ (!(0 <= K:930) \/ s':932 <= mid_s:929)
                 /\ ((K:930 = 0 /\ mid_s:929 = s':932 /\ mid_i:928 = i':931)
                       \/ (1 <= K:930 /\ 0 <= (-1 + -mid_i:928 + 2)
                             /\ 0 <= (255 + -mid_s:929
                                        + (256 * floor((1/256 * mid_s:929))))
                             /\ 0 <= floor((1/256 * mid_s:929))
                             /\ 0 <= (mid_s:929
                                        + (-256 * floor((1/256 * mid_s:929))))
                             /\ 0 <= mid_i:928 /\ 0 <= (-1 + i':931)
                             /\ 0 <= s':932 /\ 0 <= (2 + -i':931)))
                 /\ (0 = K:930 \/ -mid_s:929 <= 0) /\ (K:927 + K:930) = K:933
                 /\ 0 <= K:933 /\ 0 <= i':931 /\ 2 <= i':931
                 /\ (!(0 <= K:944) \/ mid_i:945 = K:944)
                 /\ (!(0 <= K:944)
                       \/ (-256 * mid_s:946) <= ((-256 * guess_binval:4)
                                                   + (-255 * K:944)))
                 /\ ((K:944 = 0 /\ guess_binval:4 = mid_s:946
                        /\ 0 = mid_i:945)
                       \/ (1 <= K:944
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:946 /\ 0 <= (-1 + mid_i:945)
                             /\ 0 <= (2 + -mid_i:945)))
                 /\ (0 = K:944 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:947) \/ i':948 = (mid_i:945 + K:947))
                 /\ (!(0 <= K:947) \/ s':949 <= mid_s:946)
                 /\ ((K:947 = 0 /\ mid_s:946 = s':949 /\ mid_i:945 = i':948)
                       \/ (1 <= K:947 /\ 0 <= (-1 + -mid_i:945 + 2)
                             /\ 0 <= (255 + -mid_s:946
                                        + (256 * floor((1/256 * mid_s:946))))
                             /\ 0 <= floor((1/256 * mid_s:946))
                             /\ 0 <= (mid_s:946
                                        + (-256 * floor((1/256 * mid_s:946))))
                             /\ 0 <= mid_i:945 /\ 0 <= (-1 + i':948)
                             /\ 0 <= s':949 /\ 0 <= (2 + -i':948)))
                 /\ (0 = K:947 \/ -mid_s:946 <= 0) /\ (K:944 + K:947) = K:950
                 /\ 0 <= K:950 /\ 0 <= i':948 /\ 2 <= i':948
                 /\ (s':949 mod 256) <= (s':932 mod 256)
                 /\ (s':932 mod 256) <= (s':949 mod 256)
                 /\ (!(0 <= K:961) \/ mid_i:962 = K:961)
                 /\ (!(0 <= K:961)
                       \/ (-256 * mid_s:963) <= ((-256 * password_binval:5)
                                                   + (-255 * K:961)))
                 /\ ((K:961 = 0 /\ password_binval:5 = mid_s:963
                        /\ 0 = mid_i:962)
                       \/ (1 <= K:961
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:963 /\ 0 <= (-1 + mid_i:962)
                             /\ 0 <= (1 + -mid_i:962)))
                 /\ (0 = K:961 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:964) \/ i':965 = (mid_i:962 + K:964))
                 /\ (!(0 <= K:964) \/ s':966 <= mid_s:963)
                 /\ ((K:964 = 0 /\ mid_s:963 = s':966 /\ mid_i:962 = i':965)
                       \/ (1 <= K:964 /\ 0 <= (-1 + -mid_i:962 + 1)
                             /\ 0 <= (255 + -mid_s:963
                                        + (256 * floor((1/256 * mid_s:963))))
                             /\ 0 <= floor((1/256 * mid_s:963))
                             /\ 0 <= (mid_s:963
                                        + (-256 * floor((1/256 * mid_s:963))))
                             /\ 0 <= mid_i:962 /\ 0 <= (-1 + i':965)
                             /\ 0 <= s':966 /\ 0 <= (1 + -i':965)))
                 /\ (0 = K:964 \/ -mid_s:963 <= 0) /\ (K:961 + K:964) = K:967
                 /\ 0 <= K:967 /\ 0 <= i':965 /\ 1 <= i':965
                 /\ (!(0 <= K:978) \/ mid_i:979 = K:978)
                 /\ (!(0 <= K:978)
                       \/ (-256 * mid_s:980) <= ((-256 * guess_binval:4)
                                                   + (-255 * K:978)))
                 /\ ((K:978 = 0 /\ guess_binval:4 = mid_s:980
                        /\ 0 = mid_i:979)
                       \/ (1 <= K:978
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:980 /\ 0 <= (-1 + mid_i:979)
                             /\ 0 <= (1 + -mid_i:979)))
                 /\ (0 = K:978 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:981) \/ i':982 = (mid_i:979 + K:981))
                 /\ (!(0 <= K:981) \/ s':983 <= mid_s:980)
                 /\ ((K:981 = 0 /\ mid_s:980 = s':983 /\ mid_i:979 = i':982)
                       \/ (1 <= K:981 /\ 0 <= (-1 + -mid_i:979 + 1)
                             /\ 0 <= (255 + -mid_s:980
                                        + (256 * floor((1/256 * mid_s:980))))
                             /\ 0 <= floor((1/256 * mid_s:980))
                             /\ 0 <= (mid_s:980
                                        + (-256 * floor((1/256 * mid_s:980))))
                             /\ 0 <= mid_i:979 /\ 0 <= (-1 + i':982)
                             /\ 0 <= s':983 /\ 0 <= (1 + -i':982)))
                 /\ (0 = K:981 \/ -mid_s:980 <= 0) /\ (K:978 + K:981) = K:984
                 /\ 0 <= K:984 /\ 0 <= i':982 /\ 1 <= i':982
                 /\ (s':983 mod 256) <= (s':966 mod 256)
                 /\ (s':966 mod 256) <= (s':983 mod 256)
                 /\ (!(0 <= K:995) \/ mid_i:996 = K:995)
                 /\ (!(0 <= K:995)
                       \/ (-256 * mid_s:997) <= ((-256 * password_binval:5)
                                                   + (-255 * K:995)))
                 /\ K:995 = 0 /\ password_binval:5 = mid_s:997
                 /\ 0 = mid_i:996
                 /\ (0 = K:995 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:998) \/ i':999 = (mid_i:996 + K:998))
                 /\ (!(0 <= K:998) \/ s':1000 <= mid_s:997)
                 /\ ((K:998 = 0 /\ mid_s:997 = s':1000 /\ mid_i:996 = i':999)
                       \/ (1 <= K:998 /\ 0 <= (-1 + -mid_i:996)
                             /\ 0 <= (255 + -mid_s:997
                                        + (256 * floor((1/256 * mid_s:997))))
                             /\ 0 <= floor((1/256 * mid_s:997))
                             /\ 0 <= (mid_s:997
                                        + (-256 * floor((1/256 * mid_s:997))))
                             /\ 0 <= mid_i:996 /\ 0 <= (-1 + i':999)
                             /\ 0 <= s':1000 /\ 0 <= -i':999))
                 /\ (0 = K:998 \/ -mid_s:997 <= 0)
                 /\ (K:995 + K:998) = K:1001 /\ 0 <= K:1001 /\ 0 <= i':999
                 /\ 0 <= i':999 /\ (!(0 <= K:1012) \/ mid_i:1013 = K:1012)
                 /\ (!(0 <= K:1012)
                       \/ (-256 * mid_s:1014) <= ((-256 * guess_binval:4)
                                                    + (-255 * K:1012)))
                 /\ K:1012 = 0 /\ guess_binval:4 = mid_s:1014
                 /\ 0 = mid_i:1013 /\ (0 = K:1012 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:1015) \/ i':1016 = (mid_i:1013 + K:1015))
                 /\ (!(0 <= K:1015) \/ s':1017 <= mid_s:1014)
                 /\ ((K:1015 = 0 /\ mid_s:1014 = s':1017
                        /\ mid_i:1013 = i':1016)
                       \/ (1 <= K:1015 /\ 0 <= (-1 + -mid_i:1013)
                             /\ 0 <= (255 + -mid_s:1014
                                        + (256 * floor((1/256 * mid_s:1014))))
                             /\ 0 <= floor((1/256 * mid_s:1014))
                             /\ 0 <= (mid_s:1014
                                        + (-256 * floor((1/256 * mid_s:1014))))
                             /\ 0 <= mid_i:1013 /\ 0 <= (-1 + i':1016)
                             /\ 0 <= s':1017 /\ 0 <= -i':1016))
                 /\ (0 = K:1015 \/ -mid_s:1014 <= 0)
                 /\ (K:1012 + K:1015) = K:1018 /\ 0 <= K:1018 /\ 0 <= i':1016
                 /\ 0 <= i':1016
                 /\ ((((s':1000 mod 256) < (s':1017 mod 256)
                         \/ (s':1017 mod 256) < (s':1000 mod 256))
                        /\ 2 = phi___retres7:1025)
                       \/ ((s':1017 mod 256) <= (s':1000 mod 256)
                             /\ (s':1000 mod 256) <= (s':1017 mod 256)
                             /\ 3 = phi___retres7:1025))
                 /\ (s':932 mod 256) = phi_tmp:1212
                 /\ (s':949 mod 256) = phi_tmp___0:1211
                 /\ (s':966 mod 256) = phi_tmp___1:1210
                 /\ (s':983 mod 256) = phi_tmp___2:1209
                 /\ (s':1000 mod 256) = phi_tmp___3:1208
                 /\ phi___retres7:1025 = phi___retres7:1207
                 /\ (s':1017 mod 256) = phi_return:1206
                 /\ 0 = phi_param1:1205
                 /\ type_err:1019 = phi_return@pos:1204
                 /\ type_err:1020 = phi_param0@pos:1203
                 /\ type_err:1021 = phi_param1@pos:1202
                 /\ type_err:1022 = phi_return@width:1201
                 /\ type_err:1023 = phi_param0@width:1200
                 /\ type_err:1024 = phi_param1@width:1199))})


New-style (IRE) regular expression in IREregExpsAfterIsolation for reID=37: 
Weight(Base relation: 
  {return := (s':1223 mod 256)
   param0 := param0:246
   param1 := param1:249
   return@pos := type_err:1227
   param0@pos := type_err:256
   param1@pos := type_err:257
   return@width := type_err:1228
   param0@width := type_err:258
   param1@width := type_err:259
   when ((!(0 <= K:1218) \/ mid_i:1219 = K:1218)
           /\ (!(0 <= K:1218)
                 \/ (-256 * mid_s:1220) <= ((-256 * param0:246)
                                              + (-255 * K:1218)))
           /\ ((K:1218 = 0 /\ param0:246 = mid_s:1220 /\ 0 = mid_i:1219)
                 \/ (1 <= K:1218
                       /\ 0 <= (-param0:246
                                  + (-256 * floor((-1/256 * param0:246))))
                       /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                       /\ 0 <= floor((-1/256 * param0:246))
                       /\ 0 <= (255 + param0:246
                                  + (256 * floor((-1/256 * param0:246))))
                       /\ 0 <= -mid_s:1220 /\ 0 <= (-1 + mid_i:1219)
                       /\ 0 <= (param1:249 + -mid_i:1219)))
           /\ (0 = K:1218 \/ !(-param0:246 <= 0))
           /\ (!(0 <= K:1221) \/ i':1222 = (mid_i:1219 + K:1221))
           /\ (!(0 <= K:1221) \/ s':1223 <= mid_s:1220)
           /\ ((K:1221 = 0 /\ mid_s:1220 = s':1223 /\ mid_i:1219 = i':1222)
                 \/ (1 <= K:1221 /\ 0 <= (-1 + -mid_i:1219 + param1:249)
                       /\ 0 <= (255 + -mid_s:1220
                                  + (256 * floor((1/256 * mid_s:1220))))
                       /\ 0 <= floor((1/256 * mid_s:1220))
                       /\ 0 <= (mid_s:1220
                                  + (-256 * floor((1/256 * mid_s:1220))))
                       /\ 0 <= mid_i:1219 /\ 0 <= (-1 + i':1222)
                       /\ 0 <= s':1223 /\ 0 <= (param1:249 + -i':1222)))
           /\ (0 = K:1221 \/ -mid_s:1220 <= 0) /\ (K:1218 + K:1221) = K:1224
           /\ 0 <= K:1224 /\ 0 <= i':1222 /\ param1:249 <= i':1222)})


New-style (IRE) regular expression in IREregExpsAfterIsolation for reID=43: 
Weight(Base relation: 
  {return := s':359
   return@pos := type_err:361
   return@width := type_err:362
   when ((!(0 <= K:354) \/ mid_i:355 = K:354)
           /\ (!(0 <= K:354)
                 \/ (-256 * mid_s:356) <= ((-256 * param0:246)
                                             + (-255 * K:354)))
           /\ ((K:354 = 0 /\ param0:246 = mid_s:356 /\ 0 = mid_i:355)
                 \/ (1 <= K:354
                       /\ 0 <= (-param0:246
                                  + (-256 * floor((-1/256 * param0:246))))
                       /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                       /\ 0 <= floor((-1/256 * param0:246))
                       /\ 0 <= (255 + param0:246
                                  + (256 * floor((-1/256 * param0:246))))
                       /\ 0 <= -mid_s:356 /\ 0 <= (-1 + mid_i:355)
                       /\ 0 <= (param1:249 + -mid_i:355)))
           /\ (0 = K:354 \/ !(-param0:246 <= 0))
           /\ (!(0 <= K:357) \/ i':358 = (mid_i:355 + K:357))
           /\ (!(0 <= K:357) \/ s':359 <= mid_s:356)
           /\ ((K:357 = 0 /\ mid_s:356 = s':359 /\ mid_i:355 = i':358)
                 \/ (1 <= K:357 /\ 0 <= (-1 + -mid_i:355 + param1:249)
                       /\ 0 <= (255 + -mid_s:356
                                  + (256 * floor((1/256 * mid_s:356))))
                       /\ 0 <= floor((1/256 * mid_s:356))
                       /\ 0 <= (mid_s:356
                                  + (-256 * floor((1/256 * mid_s:356))))
                       /\ 0 <= mid_i:355 /\ 0 <= (-1 + i':358) /\ 0 <= s':359
                       /\ 0 <= (param1:249 + -i':358)))
           /\ (0 = K:357 \/ -mid_s:356 <= 0) /\ (K:354 + K:357) = K:360
           /\ 0 <= K:360 /\ 0 <= i':358 /\ param1:249 <= i':358)})


Step 5: =========================================================
[Newton] Running Newton
-------------------------------------------------------------------------------
Round 0:
Evaluating variable number 7 (using IRE) 

  The IRE-evaluated value on this round is: 

Base relation: 
{result := phi___retres7:798
 password_binval := havoc:15
 guess_binval := havoc:0
 return := havoc:858
 param0 := havoc:0
 param1 := phi_param1:800
 return@pos := type_err:859
 param0@pos := phi_param0@pos:802
 param1@pos := phi_param1@pos:803
 return@width := type_err:860
 param0@width := phi_param0@width:805
 param1@width := phi_param1@width:806
 when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
         /\ havoc:15 < 16777216
         /\ ((((0 <= havoc:0 /\ 0 <= havoc:15
                  /\ (!(0 <= K:723) \/ mid_i:724 = K:723)
                  /\ (!(0 <= K:723)
                        \/ (-256 * mid_s:725) <= ((-256 * havoc:15)
                                                    + (-255 * K:723)))
                  /\ ((K:723 = 0 /\ havoc:15 = mid_s:725 /\ 0 = mid_i:724)
                        \/ (1 <= K:723
                              /\ 0 <= (-havoc:15
                                         + (-256 * floor((-1/256 * havoc:15))))
                              /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                              /\ 0 <= floor((-1/256 * havoc:15))
                              /\ 0 <= (255 + havoc:15
                                         + (256 * floor((-1/256 * havoc:15))))
                              /\ 0 <= -mid_s:725 /\ 0 <= (-1 + mid_i:724)
                              /\ 0 <= (2 + -mid_i:724)))
                  /\ (0 = K:723 \/ !(-havoc:15 <= 0))
                  /\ (!(0 <= K:726) \/ i':727 = (mid_i:724 + K:726))
                  /\ (!(0 <= K:726) \/ s':728 <= mid_s:725)
                  /\ ((K:726 = 0 /\ mid_s:725 = s':728 /\ mid_i:724 = i':727)
                        \/ (1 <= K:726 /\ 0 <= (-1 + -mid_i:724 + 2)
                              /\ 0 <= (255 + -mid_s:725
                                         + (256 * floor((1/256 * mid_s:725))))
                              /\ 0 <= floor((1/256 * mid_s:725))
                              /\ 0 <= (mid_s:725
                                         + (-256 * floor((1/256 * mid_s:725))))
                              /\ 0 <= mid_i:724 /\ 0 <= (-1 + i':727)
                              /\ 0 <= s':728 /\ 0 <= (2 + -i':727)))
                  /\ (0 = K:726 \/ -mid_s:725 <= 0)
                  /\ (K:723 + K:726) = K:729 /\ 0 <= K:729 /\ 0 <= i':727
                  /\ 2 <= i':727 /\ (!(0 <= K:730) \/ mid_i:731 = K:730)
                  /\ (!(0 <= K:730)
                        \/ (-256 * mid_s:732) <= ((-256 * havoc:0)
                                                    + (-255 * K:730)))
                  /\ ((K:730 = 0 /\ havoc:0 = mid_s:732 /\ 0 = mid_i:731)
                        \/ (1 <= K:730
                              /\ 0 <= (-havoc:0
                                         + (-256 * floor((-1/256 * havoc:0))))
                              /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                              /\ 0 <= floor((-1/256 * havoc:0))
                              /\ 0 <= (255 + havoc:0
                                         + (256 * floor((-1/256 * havoc:0))))
                              /\ 0 <= -mid_s:732 /\ 0 <= (-1 + mid_i:731)
                              /\ 0 <= (2 + -mid_i:731)))
                  /\ (0 = K:730 \/ !(-havoc:0 <= 0))
                  /\ (!(0 <= K:733) \/ i':734 = (mid_i:731 + K:733))
                  /\ (!(0 <= K:733) \/ s':735 <= mid_s:732)
                  /\ ((K:733 = 0 /\ mid_s:732 = s':735 /\ mid_i:731 = i':734)
                        \/ (1 <= K:733 /\ 0 <= (-1 + -mid_i:731 + 2)
                              /\ 0 <= (255 + -mid_s:732
                                         + (256 * floor((1/256 * mid_s:732))))
                              /\ 0 <= floor((1/256 * mid_s:732))
                              /\ 0 <= (mid_s:732
                                         + (-256 * floor((1/256 * mid_s:732))))
                              /\ 0 <= mid_i:731 /\ 0 <= (-1 + i':734)
                              /\ 0 <= s':735 /\ 0 <= (2 + -i':734)))
                  /\ (0 = K:733 \/ -mid_s:732 <= 0)
                  /\ (K:730 + K:733) = K:736 /\ 0 <= K:736 /\ 0 <= i':734
                  /\ 2 <= i':734
                  /\ ((s':728 mod 256) < (s':735 mod 256)
                        \/ (s':735 mod 256) < (s':728 mod 256))
                  /\ (s':728 mod 256) = phi_tmp:737
                  /\ (s':735 mod 256) = phi_tmp___0:738
                  /\ tmp___1:739 = phi_tmp___1:740
                  /\ tmp___2:741 = phi_tmp___2:742 /\ 0 = phi___retres7:743
                  /\ (s':735 mod 256) = phi_return:744 /\ 2 = phi_param1:745
                  /\ type_err:746 = phi_return@pos:747
                  /\ type_err:748 = phi_param0@pos:749
                  /\ type_err:750 = phi_param1@pos:751
                  /\ type_err:752 = phi_return@width:753
                  /\ type_err:754 = phi_param0@width:755
                  /\ type_err:756 = phi_param1@width:757)
                 \/ (0 <= havoc:0 /\ 0 <= havoc:15
                       /\ (!(0 <= K:758) \/ mid_i:759 = K:758)
                       /\ (!(0 <= K:758)
                             \/ (-256 * mid_s:760) <= ((-256 * havoc:15)
                                                         + (-255 * K:758)))
                       /\ ((K:758 = 0 /\ havoc:15 = mid_s:760
                              /\ 0 = mid_i:759)
                             \/ (1 <= K:758
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:760
                                   /\ 0 <= (-1 + mid_i:759)
                                   /\ 0 <= (2 + -mid_i:759)))
                       /\ (0 = K:758 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:761) \/ i':762 = (mid_i:759 + K:761))
                       /\ (!(0 <= K:761) \/ s':763 <= mid_s:760)
                       /\ ((K:761 = 0 /\ mid_s:760 = s':763
                              /\ mid_i:759 = i':762)
                             \/ (1 <= K:761 /\ 0 <= (-1 + -mid_i:759 + 2)
                                   /\ 0 <= (255 + -mid_s:760
                                              + (256
                                                   * floor((1/256 * mid_s:760))))
                                   /\ 0 <= floor((1/256 * mid_s:760))
                                   /\ 0 <= (mid_s:760
                                              + (-256
                                                   * floor((1/256 * mid_s:760))))
                                   /\ 0 <= mid_i:759 /\ 0 <= (-1 + i':762)
                                   /\ 0 <= s':763 /\ 0 <= (2 + -i':762)))
                       /\ (0 = K:761 \/ -mid_s:760 <= 0)
                       /\ (K:758 + K:761) = K:764 /\ 0 <= K:764
                       /\ 0 <= i':762 /\ 2 <= i':762
                       /\ (!(0 <= K:765) \/ mid_i:766 = K:765)
                       /\ (!(0 <= K:765)
                             \/ (-256 * mid_s:767) <= ((-256 * havoc:0)
                                                         + (-255 * K:765)))
                       /\ ((K:765 = 0 /\ havoc:0 = mid_s:767 /\ 0 = mid_i:766)
                             \/ (1 <= K:765
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:767
                                   /\ 0 <= (-1 + mid_i:766)
                                   /\ 0 <= (2 + -mid_i:766)))
                       /\ (0 = K:765 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:768) \/ i':769 = (mid_i:766 + K:768))
                       /\ (!(0 <= K:768) \/ s':770 <= mid_s:767)
                       /\ ((K:768 = 0 /\ mid_s:767 = s':770
                              /\ mid_i:766 = i':769)
                             \/ (1 <= K:768 /\ 0 <= (-1 + -mid_i:766 + 2)
                                   /\ 0 <= (255 + -mid_s:767
                                              + (256
                                                   * floor((1/256 * mid_s:767))))
                                   /\ 0 <= floor((1/256 * mid_s:767))
                                   /\ 0 <= (mid_s:767
                                              + (-256
                                                   * floor((1/256 * mid_s:767))))
                                   /\ 0 <= mid_i:766 /\ 0 <= (-1 + i':769)
                                   /\ 0 <= s':770 /\ 0 <= (2 + -i':769)))
                       /\ (0 = K:768 \/ -mid_s:767 <= 0)
                       /\ (K:765 + K:768) = K:771 /\ 0 <= K:771
                       /\ 0 <= i':769 /\ 2 <= i':769
                       /\ (s':770 mod 256) <= (s':763 mod 256)
                       /\ (s':763 mod 256) <= (s':770 mod 256)
                       /\ (!(0 <= K:772) \/ mid_i:773 = K:772)
                       /\ (!(0 <= K:772)
                             \/ (-256 * mid_s:774) <= ((-256 * havoc:15)
                                                         + (-255 * K:772)))
                       /\ ((K:772 = 0 /\ havoc:15 = mid_s:774
                              /\ 0 = mid_i:773)
                             \/ (1 <= K:772
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:774
                                   /\ 0 <= (-1 + mid_i:773)
                                   /\ 0 <= (1 + -mid_i:773)))
                       /\ (0 = K:772 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:775) \/ i':776 = (mid_i:773 + K:775))
                       /\ (!(0 <= K:775) \/ s':777 <= mid_s:774)
                       /\ ((K:775 = 0 /\ mid_s:774 = s':777
                              /\ mid_i:773 = i':776)
                             \/ (1 <= K:775 /\ 0 <= (-1 + -mid_i:773 + 1)
                                   /\ 0 <= (255 + -mid_s:774
                                              + (256
                                                   * floor((1/256 * mid_s:774))))
                                   /\ 0 <= floor((1/256 * mid_s:774))
                                   /\ 0 <= (mid_s:774
                                              + (-256
                                                   * floor((1/256 * mid_s:774))))
                                   /\ 0 <= mid_i:773 /\ 0 <= (-1 + i':776)
                                   /\ 0 <= s':777 /\ 0 <= (1 + -i':776)))
                       /\ (0 = K:775 \/ -mid_s:774 <= 0)
                       /\ (K:772 + K:775) = K:778 /\ 0 <= K:778
                       /\ 0 <= i':776 /\ 1 <= i':776
                       /\ (!(0 <= K:779) \/ mid_i:780 = K:779)
                       /\ (!(0 <= K:779)
                             \/ (-256 * mid_s:781) <= ((-256 * havoc:0)
                                                         + (-255 * K:779)))
                       /\ ((K:779 = 0 /\ havoc:0 = mid_s:781 /\ 0 = mid_i:780)
                             \/ (1 <= K:779
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:781
                                   /\ 0 <= (-1 + mid_i:780)
                                   /\ 0 <= (1 + -mid_i:780)))
                       /\ (0 = K:779 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:782) \/ i':783 = (mid_i:780 + K:782))
                       /\ (!(0 <= K:782) \/ s':784 <= mid_s:781)
                       /\ ((K:782 = 0 /\ mid_s:781 = s':784
                              /\ mid_i:780 = i':783)
                             \/ (1 <= K:782 /\ 0 <= (-1 + -mid_i:780 + 1)
                                   /\ 0 <= (255 + -mid_s:781
                                              + (256
                                                   * floor((1/256 * mid_s:781))))
                                   /\ 0 <= floor((1/256 * mid_s:781))
                                   /\ 0 <= (mid_s:781
                                              + (-256
                                                   * floor((1/256 * mid_s:781))))
                                   /\ 0 <= mid_i:780 /\ 0 <= (-1 + i':783)
                                   /\ 0 <= s':784 /\ 0 <= (1 + -i':783)))
                       /\ (0 = K:782 \/ -mid_s:781 <= 0)
                       /\ (K:779 + K:782) = K:785 /\ 0 <= K:785
                       /\ 0 <= i':783 /\ 1 <= i':783
                       /\ ((s':777 mod 256) < (s':784 mod 256)
                             \/ (s':784 mod 256) < (s':777 mod 256))
                       /\ (s':763 mod 256) = phi_tmp:737
                       /\ (s':770 mod 256) = phi_tmp___0:738
                       /\ (s':777 mod 256) = phi_tmp___1:740
                       /\ (s':784 mod 256) = phi_tmp___2:742
                       /\ 1 = phi___retres7:743
                       /\ (s':784 mod 256) = phi_return:744
                       /\ 1 = phi_param1:745
                       /\ type_err:786 = phi_return@pos:747
                       /\ type_err:787 = phi_param0@pos:749
                       /\ type_err:788 = phi_param1@pos:751
                       /\ type_err:789 = phi_return@width:753
                       /\ type_err:790 = phi_param0@width:755
                       /\ type_err:791 = phi_param1@width:757))
                /\ phi_tmp:737 = phi_tmp:792
                /\ phi_tmp___0:738 = phi_tmp___0:793
                /\ phi_tmp___1:740 = phi_tmp___1:794
                /\ phi_tmp___2:742 = phi_tmp___2:795
                /\ tmp___3:796 = phi_tmp___3:797
                /\ phi___retres7:743 = phi___retres7:798
                /\ phi_return:744 = phi_return:799
                /\ phi_param1:745 = phi_param1:800
                /\ phi_return@pos:747 = phi_return@pos:801
                /\ phi_param0@pos:749 = phi_param0@pos:802
                /\ phi_param1@pos:751 = phi_param1@pos:803
                /\ phi_return@width:753 = phi_return@width:804
                /\ phi_param0@width:755 = phi_param0@width:805
                /\ phi_param1@width:757 = phi_param1@width:806)
               \/ (0 <= havoc:0 /\ 0 <= havoc:15
                     /\ (!(0 <= K:807) \/ mid_i:808 = K:807)
                     /\ (!(0 <= K:807)
                           \/ (-256 * mid_s:809) <= ((-256 * havoc:15)
                                                       + (-255 * K:807)))
                     /\ ((K:807 = 0 /\ havoc:15 = mid_s:809 /\ 0 = mid_i:808)
                           \/ (1 <= K:807
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:809 /\ 0 <= (-1 + mid_i:808)
                                 /\ 0 <= (2 + -mid_i:808)))
                     /\ (0 = K:807 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:810) \/ i':811 = (mid_i:808 + K:810))
                     /\ (!(0 <= K:810) \/ s':812 <= mid_s:809)
                     /\ ((K:810 = 0 /\ mid_s:809 = s':812
                            /\ mid_i:808 = i':811)
                           \/ (1 <= K:810 /\ 0 <= (-1 + -mid_i:808 + 2)
                                 /\ 0 <= (255 + -mid_s:809
                                            + (256
                                                 * floor((1/256 * mid_s:809))))
                                 /\ 0 <= floor((1/256 * mid_s:809))
                                 /\ 0 <= (mid_s:809
                                            + (-256
                                                 * floor((1/256 * mid_s:809))))
                                 /\ 0 <= mid_i:808 /\ 0 <= (-1 + i':811)
                                 /\ 0 <= s':812 /\ 0 <= (2 + -i':811)))
                     /\ (0 = K:810 \/ -mid_s:809 <= 0)
                     /\ (K:807 + K:810) = K:813 /\ 0 <= K:813 /\ 0 <= i':811
                     /\ 2 <= i':811 /\ (!(0 <= K:814) \/ mid_i:815 = K:814)
                     /\ (!(0 <= K:814)
                           \/ (-256 * mid_s:816) <= ((-256 * havoc:0)
                                                       + (-255 * K:814)))
                     /\ ((K:814 = 0 /\ havoc:0 = mid_s:816 /\ 0 = mid_i:815)
                           \/ (1 <= K:814
                                 /\ 0 <= (-havoc:0
                                            + (-256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:0))
                                 /\ 0 <= (255 + havoc:0
                                            + (256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= -mid_s:816 /\ 0 <= (-1 + mid_i:815)
                                 /\ 0 <= (2 + -mid_i:815)))
                     /\ (0 = K:814 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:817) \/ i':818 = (mid_i:815 + K:817))
                     /\ (!(0 <= K:817) \/ s':819 <= mid_s:816)
                     /\ ((K:817 = 0 /\ mid_s:816 = s':819
                            /\ mid_i:815 = i':818)
                           \/ (1 <= K:817 /\ 0 <= (-1 + -mid_i:815 + 2)
                                 /\ 0 <= (255 + -mid_s:816
                                            + (256
                                                 * floor((1/256 * mid_s:816))))
                                 /\ 0 <= floor((1/256 * mid_s:816))
                                 /\ 0 <= (mid_s:816
                                            + (-256
                                                 * floor((1/256 * mid_s:816))))
                                 /\ 0 <= mid_i:815 /\ 0 <= (-1 + i':818)
                                 /\ 0 <= s':819 /\ 0 <= (2 + -i':818)))
                     /\ (0 = K:817 \/ -mid_s:816 <= 0)
                     /\ (K:814 + K:817) = K:820 /\ 0 <= K:820 /\ 0 <= i':818
                     /\ 2 <= i':818 /\ (s':819 mod 256) <= (s':812 mod 256)
                     /\ (s':812 mod 256) <= (s':819 mod 256)
                     /\ (!(0 <= K:821) \/ mid_i:822 = K:821)
                     /\ (!(0 <= K:821)
                           \/ (-256 * mid_s:823) <= ((-256 * havoc:15)
                                                       + (-255 * K:821)))
                     /\ ((K:821 = 0 /\ havoc:15 = mid_s:823 /\ 0 = mid_i:822)
                           \/ (1 <= K:821
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:823 /\ 0 <= (-1 + mid_i:822)
                                 /\ 0 <= (1 + -mid_i:822)))
                     /\ (0 = K:821 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:824) \/ i':825 = (mid_i:822 + K:824))
                     /\ (!(0 <= K:824) \/ s':826 <= mid_s:823)
                     /\ ((K:824 = 0 /\ mid_s:823 = s':826
                            /\ mid_i:822 = i':825)
                           \/ (1 <= K:824 /\ 0 <= (-1 + -mid_i:822 + 1)
                                 /\ 0 <= (255 + -mid_s:823
                                            + (256
                                                 * floor((1/256 * mid_s:823))))
                                 /\ 0 <= floor((1/256 * mid_s:823))
                                 /\ 0 <= (mid_s:823
                                            + (-256
                                                 * floor((1/256 * mid_s:823))))
                                 /\ 0 <= mid_i:822 /\ 0 <= (-1 + i':825)
                                 /\ 0 <= s':826 /\ 0 <= (1 + -i':825)))
                     /\ (0 = K:824 \/ -mid_s:823 <= 0)
                     /\ (K:821 + K:824) = K:827 /\ 0 <= K:827 /\ 0 <= i':825
                     /\ 1 <= i':825 /\ (!(0 <= K:828) \/ mid_i:829 = K:828)
                     /\ (!(0 <= K:828)
                           \/ (-256 * mid_s:830) <= ((-256 * havoc:0)
                                                       + (-255 * K:828)))
                     /\ ((K:828 = 0 /\ havoc:0 = mid_s:830 /\ 0 = mid_i:829)
                           \/ (1 <= K:828
                                 /\ 0 <= (-havoc:0
                                            + (-256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * havoc:0))
                                 /\ 0 <= (255 + havoc:0
                                            + (256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= -mid_s:830 /\ 0 <= (-1 + mid_i:829)
                                 /\ 0 <= (1 + -mid_i:829)))
                     /\ (0 = K:828 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:831) \/ i':832 = (mid_i:829 + K:831))
                     /\ (!(0 <= K:831) \/ s':833 <= mid_s:830)
                     /\ ((K:831 = 0 /\ mid_s:830 = s':833
                            /\ mid_i:829 = i':832)
                           \/ (1 <= K:831 /\ 0 <= (-1 + -mid_i:829 + 1)
                                 /\ 0 <= (255 + -mid_s:830
                                            + (256
                                                 * floor((1/256 * mid_s:830))))
                                 /\ 0 <= floor((1/256 * mid_s:830))
                                 /\ 0 <= (mid_s:830
                                            + (-256
                                                 * floor((1/256 * mid_s:830))))
                                 /\ 0 <= mid_i:829 /\ 0 <= (-1 + i':832)
                                 /\ 0 <= s':833 /\ 0 <= (1 + -i':832)))
                     /\ (0 = K:831 \/ -mid_s:830 <= 0)
                     /\ (K:828 + K:831) = K:834 /\ 0 <= K:834 /\ 0 <= i':832
                     /\ 1 <= i':832 /\ (s':833 mod 256) <= (s':826 mod 256)
                     /\ (s':826 mod 256) <= (s':833 mod 256)
                     /\ (!(0 <= K:835) \/ mid_i:836 = K:835)
                     /\ (!(0 <= K:835)
                           \/ (-256 * mid_s:837) <= ((-256 * havoc:15)
                                                       + (-255 * K:835)))
                     /\ K:835 = 0 /\ havoc:15 = mid_s:837 /\ 0 = mid_i:836
                     /\ (0 = K:835 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:838) \/ i':839 = (mid_i:836 + K:838))
                     /\ (!(0 <= K:838) \/ s':840 <= mid_s:837)
                     /\ ((K:838 = 0 /\ mid_s:837 = s':840
                            /\ mid_i:836 = i':839)
                           \/ (1 <= K:838 /\ 0 <= (-1 + -mid_i:836)
                                 /\ 0 <= (255 + -mid_s:837
                                            + (256
                                                 * floor((1/256 * mid_s:837))))
                                 /\ 0 <= floor((1/256 * mid_s:837))
                                 /\ 0 <= (mid_s:837
                                            + (-256
                                                 * floor((1/256 * mid_s:837))))
                                 /\ 0 <= mid_i:836 /\ 0 <= (-1 + i':839)
                                 /\ 0 <= s':840 /\ 0 <= -i':839))
                     /\ (0 = K:838 \/ -mid_s:837 <= 0)
                     /\ (K:835 + K:838) = K:841 /\ 0 <= K:841 /\ 0 <= i':839
                     /\ 0 <= i':839 /\ (!(0 <= K:842) \/ mid_i:843 = K:842)
                     /\ (!(0 <= K:842)
                           \/ (-256 * mid_s:844) <= ((-256 * havoc:0)
                                                       + (-255 * K:842)))
                     /\ K:842 = 0 /\ havoc:0 = mid_s:844 /\ 0 = mid_i:843
                     /\ (0 = K:842 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:845) \/ i':846 = (mid_i:843 + K:845))
                     /\ (!(0 <= K:845) \/ s':847 <= mid_s:844)
                     /\ ((K:845 = 0 /\ mid_s:844 = s':847
                            /\ mid_i:843 = i':846)
                           \/ (1 <= K:845 /\ 0 <= (-1 + -mid_i:843)
                                 /\ 0 <= (255 + -mid_s:844
                                            + (256
                                                 * floor((1/256 * mid_s:844))))
                                 /\ 0 <= floor((1/256 * mid_s:844))
                                 /\ 0 <= (mid_s:844
                                            + (-256
                                                 * floor((1/256 * mid_s:844))))
                                 /\ 0 <= mid_i:843 /\ 0 <= (-1 + i':846)
                                 /\ 0 <= s':847 /\ 0 <= -i':846))
                     /\ (0 = K:845 \/ -mid_s:844 <= 0)
                     /\ (K:842 + K:845) = K:848 /\ 0 <= K:848 /\ 0 <= i':846
                     /\ 0 <= i':846
                     /\ ((((s':840 mod 256) < (s':847 mod 256)
                             \/ (s':847 mod 256) < (s':840 mod 256))
                            /\ 2 = phi___retres7:849)
                           \/ ((s':847 mod 256) <= (s':840 mod 256)
                                 /\ (s':840 mod 256) <= (s':847 mod 256)
                                 /\ 3 = phi___retres7:849))
                     /\ (s':812 mod 256) = phi_tmp:792
                     /\ (s':819 mod 256) = phi_tmp___0:793
                     /\ (s':826 mod 256) = phi_tmp___1:794
                     /\ (s':833 mod 256) = phi_tmp___2:795
                     /\ (s':840 mod 256) = phi_tmp___3:797
                     /\ phi___retres7:849 = phi___retres7:798
                     /\ (s':847 mod 256) = phi_return:799
                     /\ 0 = phi_param1:800
                     /\ type_err:850 = phi_return@pos:801
                     /\ type_err:851 = phi_param0@pos:802
                     /\ type_err:852 = phi_param1@pos:803
                     /\ type_err:853 = phi_return@width:804
                     /\ type_err:854 = phi_param0@width:805
                     /\ type_err:855 = phi_param1@width:806)))}

Evaluating variable number 31 (using IRE) 

  The IRE-evaluated value on this round is: 

Base relation: 
{return := phi___retres7:1207
 param0 := guess_binval:4
 param1 := phi_param1:1205
 return@pos := type_err:1213
 param0@pos := phi_param0@pos:1203
 param1@pos := phi_param1@pos:1202
 return@width := type_err:1214
 param0@width := phi_param0@width:1200
 param1@width := phi_param1@width:1199
 when ((((0 <= guess_binval:4 /\ 0 <= password_binval:5
            /\ (!(0 <= K:1156) \/ mid_i:1157 = K:1156)
            /\ (!(0 <= K:1156)
                  \/ (-256 * mid_s:1158) <= ((-256 * password_binval:5)
                                               + (-255 * K:1156)))
            /\ ((K:1156 = 0 /\ password_binval:5 = mid_s:1158
                   /\ 0 = mid_i:1157)
                  \/ (1 <= K:1156
                        /\ 0 <= (-password_binval:5
                                   + (-256
                                        * floor((-1/256 * password_binval:5))))
                        /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 2)
                        /\ 0 <= floor((-1/256 * password_binval:5))
                        /\ 0 <= (255 + password_binval:5
                                   + (256
                                        * floor((-1/256 * password_binval:5))))
                        /\ 0 <= -mid_s:1158 /\ 0 <= (-1 + mid_i:1157)
                        /\ 0 <= (2 + -mid_i:1157)))
            /\ (0 = K:1156 \/ !(-password_binval:5 <= 0))
            /\ (!(0 <= K:1159) \/ i':1160 = (mid_i:1157 + K:1159))
            /\ (!(0 <= K:1159) \/ s':1161 <= mid_s:1158)
            /\ ((K:1159 = 0 /\ mid_s:1158 = s':1161 /\ mid_i:1157 = i':1160)
                  \/ (1 <= K:1159 /\ 0 <= (-1 + -mid_i:1157 + 2)
                        /\ 0 <= (255 + -mid_s:1158
                                   + (256 * floor((1/256 * mid_s:1158))))
                        /\ 0 <= floor((1/256 * mid_s:1158))
                        /\ 0 <= (mid_s:1158
                                   + (-256 * floor((1/256 * mid_s:1158))))
                        /\ 0 <= mid_i:1157 /\ 0 <= (-1 + i':1160)
                        /\ 0 <= s':1161 /\ 0 <= (2 + -i':1160)))
            /\ (0 = K:1159 \/ -mid_s:1158 <= 0) /\ (K:1156 + K:1159) = K:1162
            /\ 0 <= K:1162 /\ 0 <= i':1160 /\ 2 <= i':1160
            /\ (!(0 <= K:1173) \/ mid_i:1174 = K:1173)
            /\ (!(0 <= K:1173)
                  \/ (-256 * mid_s:1175) <= ((-256 * guess_binval:4)
                                               + (-255 * K:1173)))
            /\ ((K:1173 = 0 /\ guess_binval:4 = mid_s:1175 /\ 0 = mid_i:1174)
                  \/ (1 <= K:1173
                        /\ 0 <= (-guess_binval:4
                                   + (-256 * floor((-1/256 * guess_binval:4))))
                        /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                        /\ 0 <= floor((-1/256 * guess_binval:4))
                        /\ 0 <= (255 + guess_binval:4
                                   + (256 * floor((-1/256 * guess_binval:4))))
                        /\ 0 <= -mid_s:1175 /\ 0 <= (-1 + mid_i:1174)
                        /\ 0 <= (2 + -mid_i:1174)))
            /\ (0 = K:1173 \/ !(-guess_binval:4 <= 0))
            /\ (!(0 <= K:1176) \/ i':1177 = (mid_i:1174 + K:1176))
            /\ (!(0 <= K:1176) \/ s':1178 <= mid_s:1175)
            /\ ((K:1176 = 0 /\ mid_s:1175 = s':1178 /\ mid_i:1174 = i':1177)
                  \/ (1 <= K:1176 /\ 0 <= (-1 + -mid_i:1174 + 2)
                        /\ 0 <= (255 + -mid_s:1175
                                   + (256 * floor((1/256 * mid_s:1175))))
                        /\ 0 <= floor((1/256 * mid_s:1175))
                        /\ 0 <= (mid_s:1175
                                   + (-256 * floor((1/256 * mid_s:1175))))
                        /\ 0 <= mid_i:1174 /\ 0 <= (-1 + i':1177)
                        /\ 0 <= s':1178 /\ 0 <= (2 + -i':1177)))
            /\ (0 = K:1176 \/ -mid_s:1175 <= 0) /\ (K:1173 + K:1176) = K:1179
            /\ 0 <= K:1179 /\ 0 <= i':1177 /\ 2 <= i':1177
            /\ ((s':1161 mod 256) < (s':1178 mod 256)
                  \/ (s':1178 mod 256) < (s':1161 mod 256))
            /\ (s':1161 mod 256) = phi_tmp:1198
            /\ (s':1178 mod 256) = phi_tmp___0:1197
            /\ tmp___1:1215 = phi_tmp___1:1196
            /\ tmp___2:1216 = phi_tmp___2:1195 /\ 0 = phi___retres7:1194
            /\ (s':1178 mod 256) = phi_return:1193 /\ 2 = phi_param1:1192
            /\ type_err:1180 = phi_return@pos:1191
            /\ type_err:1181 = phi_param0@pos:1190
            /\ type_err:1182 = phi_param1@pos:1189
            /\ type_err:1183 = phi_return@width:1188
            /\ type_err:1184 = phi_param0@width:1187
            /\ type_err:1185 = phi_param1@width:1186)
           \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                 /\ (!(0 <= K:1070) \/ mid_i:1071 = K:1070)
                 /\ (!(0 <= K:1070)
                       \/ (-256 * mid_s:1072) <= ((-256 * password_binval:5)
                                                    + (-255 * K:1070)))
                 /\ ((K:1070 = 0 /\ password_binval:5 = mid_s:1072
                        /\ 0 = mid_i:1071)
                       \/ (1 <= K:1070
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:1072 /\ 0 <= (-1 + mid_i:1071)
                             /\ 0 <= (2 + -mid_i:1071)))
                 /\ (0 = K:1070 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:1073) \/ i':1074 = (mid_i:1071 + K:1073))
                 /\ (!(0 <= K:1073) \/ s':1075 <= mid_s:1072)
                 /\ ((K:1073 = 0 /\ mid_s:1072 = s':1075
                        /\ mid_i:1071 = i':1074)
                       \/ (1 <= K:1073 /\ 0 <= (-1 + -mid_i:1071 + 2)
                             /\ 0 <= (255 + -mid_s:1072
                                        + (256 * floor((1/256 * mid_s:1072))))
                             /\ 0 <= floor((1/256 * mid_s:1072))
                             /\ 0 <= (mid_s:1072
                                        + (-256 * floor((1/256 * mid_s:1072))))
                             /\ 0 <= mid_i:1071 /\ 0 <= (-1 + i':1074)
                             /\ 0 <= s':1075 /\ 0 <= (2 + -i':1074)))
                 /\ (0 = K:1073 \/ -mid_s:1072 <= 0)
                 /\ (K:1070 + K:1073) = K:1076 /\ 0 <= K:1076 /\ 0 <= i':1074
                 /\ 2 <= i':1074 /\ (!(0 <= K:1087) \/ mid_i:1088 = K:1087)
                 /\ (!(0 <= K:1087)
                       \/ (-256 * mid_s:1089) <= ((-256 * guess_binval:4)
                                                    + (-255 * K:1087)))
                 /\ ((K:1087 = 0 /\ guess_binval:4 = mid_s:1089
                        /\ 0 = mid_i:1088)
                       \/ (1 <= K:1087
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:1089 /\ 0 <= (-1 + mid_i:1088)
                             /\ 0 <= (2 + -mid_i:1088)))
                 /\ (0 = K:1087 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:1090) \/ i':1091 = (mid_i:1088 + K:1090))
                 /\ (!(0 <= K:1090) \/ s':1092 <= mid_s:1089)
                 /\ ((K:1090 = 0 /\ mid_s:1089 = s':1092
                        /\ mid_i:1088 = i':1091)
                       \/ (1 <= K:1090 /\ 0 <= (-1 + -mid_i:1088 + 2)
                             /\ 0 <= (255 + -mid_s:1089
                                        + (256 * floor((1/256 * mid_s:1089))))
                             /\ 0 <= floor((1/256 * mid_s:1089))
                             /\ 0 <= (mid_s:1089
                                        + (-256 * floor((1/256 * mid_s:1089))))
                             /\ 0 <= mid_i:1088 /\ 0 <= (-1 + i':1091)
                             /\ 0 <= s':1092 /\ 0 <= (2 + -i':1091)))
                 /\ (0 = K:1090 \/ -mid_s:1089 <= 0)
                 /\ (K:1087 + K:1090) = K:1093 /\ 0 <= K:1093 /\ 0 <= i':1091
                 /\ 2 <= i':1091 /\ (s':1092 mod 256) <= (s':1075 mod 256)
                 /\ (s':1075 mod 256) <= (s':1092 mod 256)
                 /\ (!(0 <= K:1104) \/ mid_i:1105 = K:1104)
                 /\ (!(0 <= K:1104)
                       \/ (-256 * mid_s:1106) <= ((-256 * password_binval:5)
                                                    + (-255 * K:1104)))
                 /\ ((K:1104 = 0 /\ password_binval:5 = mid_s:1106
                        /\ 0 = mid_i:1105)
                       \/ (1 <= K:1104
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:1106 /\ 0 <= (-1 + mid_i:1105)
                             /\ 0 <= (1 + -mid_i:1105)))
                 /\ (0 = K:1104 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:1107) \/ i':1108 = (mid_i:1105 + K:1107))
                 /\ (!(0 <= K:1107) \/ s':1109 <= mid_s:1106)
                 /\ ((K:1107 = 0 /\ mid_s:1106 = s':1109
                        /\ mid_i:1105 = i':1108)
                       \/ (1 <= K:1107 /\ 0 <= (-1 + -mid_i:1105 + 1)
                             /\ 0 <= (255 + -mid_s:1106
                                        + (256 * floor((1/256 * mid_s:1106))))
                             /\ 0 <= floor((1/256 * mid_s:1106))
                             /\ 0 <= (mid_s:1106
                                        + (-256 * floor((1/256 * mid_s:1106))))
                             /\ 0 <= mid_i:1105 /\ 0 <= (-1 + i':1108)
                             /\ 0 <= s':1109 /\ 0 <= (1 + -i':1108)))
                 /\ (0 = K:1107 \/ -mid_s:1106 <= 0)
                 /\ (K:1104 + K:1107) = K:1110 /\ 0 <= K:1110 /\ 0 <= i':1108
                 /\ 1 <= i':1108 /\ (!(0 <= K:1121) \/ mid_i:1122 = K:1121)
                 /\ (!(0 <= K:1121)
                       \/ (-256 * mid_s:1123) <= ((-256 * guess_binval:4)
                                                    + (-255 * K:1121)))
                 /\ ((K:1121 = 0 /\ guess_binval:4 = mid_s:1123
                        /\ 0 = mid_i:1122)
                       \/ (1 <= K:1121
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:1123 /\ 0 <= (-1 + mid_i:1122)
                             /\ 0 <= (1 + -mid_i:1122)))
                 /\ (0 = K:1121 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:1124) \/ i':1125 = (mid_i:1122 + K:1124))
                 /\ (!(0 <= K:1124) \/ s':1126 <= mid_s:1123)
                 /\ ((K:1124 = 0 /\ mid_s:1123 = s':1126
                        /\ mid_i:1122 = i':1125)
                       \/ (1 <= K:1124 /\ 0 <= (-1 + -mid_i:1122 + 1)
                             /\ 0 <= (255 + -mid_s:1123
                                        + (256 * floor((1/256 * mid_s:1123))))
                             /\ 0 <= floor((1/256 * mid_s:1123))
                             /\ 0 <= (mid_s:1123
                                        + (-256 * floor((1/256 * mid_s:1123))))
                             /\ 0 <= mid_i:1122 /\ 0 <= (-1 + i':1125)
                             /\ 0 <= s':1126 /\ 0 <= (1 + -i':1125)))
                 /\ (0 = K:1124 \/ -mid_s:1123 <= 0)
                 /\ (K:1121 + K:1124) = K:1127 /\ 0 <= K:1127 /\ 0 <= i':1125
                 /\ 1 <= i':1125
                 /\ ((s':1109 mod 256) < (s':1126 mod 256)
                       \/ (s':1126 mod 256) < (s':1109 mod 256))
                 /\ (s':1075 mod 256) = phi_tmp:1198
                 /\ (s':1092 mod 256) = phi_tmp___0:1197
                 /\ (s':1109 mod 256) = phi_tmp___1:1196
                 /\ (s':1126 mod 256) = phi_tmp___2:1195
                 /\ 1 = phi___retres7:1194
                 /\ (s':1126 mod 256) = phi_return:1193
                 /\ 1 = phi_param1:1192
                 /\ type_err:1128 = phi_return@pos:1191
                 /\ type_err:1129 = phi_param0@pos:1190
                 /\ type_err:1130 = phi_param1@pos:1189
                 /\ type_err:1131 = phi_return@width:1188
                 /\ type_err:1132 = phi_param0@width:1187
                 /\ type_err:1133 = phi_param1@width:1186))
          /\ phi_tmp:1198 = phi_tmp:1212
          /\ phi_tmp___0:1197 = phi_tmp___0:1211
          /\ phi_tmp___1:1196 = phi_tmp___1:1210
          /\ phi_tmp___2:1195 = phi_tmp___2:1209
          /\ tmp___3:1217 = phi_tmp___3:1208
          /\ phi___retres7:1194 = phi___retres7:1207
          /\ phi_return:1193 = phi_return:1206
          /\ phi_param1:1192 = phi_param1:1205
          /\ phi_return@pos:1191 = phi_return@pos:1204
          /\ phi_param0@pos:1190 = phi_param0@pos:1203
          /\ phi_param1@pos:1189 = phi_param1@pos:1202
          /\ phi_return@width:1188 = phi_return@width:1201
          /\ phi_param0@width:1187 = phi_param0@width:1200
          /\ phi_param1@width:1186 = phi_param1@width:1199)
         \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
               /\ (!(0 <= K:927) \/ mid_i:928 = K:927)
               /\ (!(0 <= K:927)
                     \/ (-256 * mid_s:929) <= ((-256 * password_binval:5)
                                                 + (-255 * K:927)))
               /\ ((K:927 = 0 /\ password_binval:5 = mid_s:929
                      /\ 0 = mid_i:928)
                     \/ (1 <= K:927
                           /\ 0 <= (-password_binval:5
                                      + (-256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 2)
                           /\ 0 <= floor((-1/256 * password_binval:5))
                           /\ 0 <= (255 + password_binval:5
                                      + (256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= -mid_s:929 /\ 0 <= (-1 + mid_i:928)
                           /\ 0 <= (2 + -mid_i:928)))
               /\ (0 = K:927 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:930) \/ i':931 = (mid_i:928 + K:930))
               /\ (!(0 <= K:930) \/ s':932 <= mid_s:929)
               /\ ((K:930 = 0 /\ mid_s:929 = s':932 /\ mid_i:928 = i':931)
                     \/ (1 <= K:930 /\ 0 <= (-1 + -mid_i:928 + 2)
                           /\ 0 <= (255 + -mid_s:929
                                      + (256 * floor((1/256 * mid_s:929))))
                           /\ 0 <= floor((1/256 * mid_s:929))
                           /\ 0 <= (mid_s:929
                                      + (-256 * floor((1/256 * mid_s:929))))
                           /\ 0 <= mid_i:928 /\ 0 <= (-1 + i':931)
                           /\ 0 <= s':932 /\ 0 <= (2 + -i':931)))
               /\ (0 = K:930 \/ -mid_s:929 <= 0) /\ (K:927 + K:930) = K:933
               /\ 0 <= K:933 /\ 0 <= i':931 /\ 2 <= i':931
               /\ (!(0 <= K:944) \/ mid_i:945 = K:944)
               /\ (!(0 <= K:944)
                     \/ (-256 * mid_s:946) <= ((-256 * guess_binval:4)
                                                 + (-255 * K:944)))
               /\ ((K:944 = 0 /\ guess_binval:4 = mid_s:946 /\ 0 = mid_i:945)
                     \/ (1 <= K:944
                           /\ 0 <= (-guess_binval:4
                                      + (-256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                           /\ 0 <= floor((-1/256 * guess_binval:4))
                           /\ 0 <= (255 + guess_binval:4
                                      + (256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= -mid_s:946 /\ 0 <= (-1 + mid_i:945)
                           /\ 0 <= (2 + -mid_i:945)))
               /\ (0 = K:944 \/ !(-guess_binval:4 <= 0))
               /\ (!(0 <= K:947) \/ i':948 = (mid_i:945 + K:947))
               /\ (!(0 <= K:947) \/ s':949 <= mid_s:946)
               /\ ((K:947 = 0 /\ mid_s:946 = s':949 /\ mid_i:945 = i':948)
                     \/ (1 <= K:947 /\ 0 <= (-1 + -mid_i:945 + 2)
                           /\ 0 <= (255 + -mid_s:946
                                      + (256 * floor((1/256 * mid_s:946))))
                           /\ 0 <= floor((1/256 * mid_s:946))
                           /\ 0 <= (mid_s:946
                                      + (-256 * floor((1/256 * mid_s:946))))
                           /\ 0 <= mid_i:945 /\ 0 <= (-1 + i':948)
                           /\ 0 <= s':949 /\ 0 <= (2 + -i':948)))
               /\ (0 = K:947 \/ -mid_s:946 <= 0) /\ (K:944 + K:947) = K:950
               /\ 0 <= K:950 /\ 0 <= i':948 /\ 2 <= i':948
               /\ (s':949 mod 256) <= (s':932 mod 256)
               /\ (s':932 mod 256) <= (s':949 mod 256)
               /\ (!(0 <= K:961) \/ mid_i:962 = K:961)
               /\ (!(0 <= K:961)
                     \/ (-256 * mid_s:963) <= ((-256 * password_binval:5)
                                                 + (-255 * K:961)))
               /\ ((K:961 = 0 /\ password_binval:5 = mid_s:963
                      /\ 0 = mid_i:962)
                     \/ (1 <= K:961
                           /\ 0 <= (-password_binval:5
                                      + (-256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 1)
                           /\ 0 <= floor((-1/256 * password_binval:5))
                           /\ 0 <= (255 + password_binval:5
                                      + (256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= -mid_s:963 /\ 0 <= (-1 + mid_i:962)
                           /\ 0 <= (1 + -mid_i:962)))
               /\ (0 = K:961 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:964) \/ i':965 = (mid_i:962 + K:964))
               /\ (!(0 <= K:964) \/ s':966 <= mid_s:963)
               /\ ((K:964 = 0 /\ mid_s:963 = s':966 /\ mid_i:962 = i':965)
                     \/ (1 <= K:964 /\ 0 <= (-1 + -mid_i:962 + 1)
                           /\ 0 <= (255 + -mid_s:963
                                      + (256 * floor((1/256 * mid_s:963))))
                           /\ 0 <= floor((1/256 * mid_s:963))
                           /\ 0 <= (mid_s:963
                                      + (-256 * floor((1/256 * mid_s:963))))
                           /\ 0 <= mid_i:962 /\ 0 <= (-1 + i':965)
                           /\ 0 <= s':966 /\ 0 <= (1 + -i':965)))
               /\ (0 = K:964 \/ -mid_s:963 <= 0) /\ (K:961 + K:964) = K:967
               /\ 0 <= K:967 /\ 0 <= i':965 /\ 1 <= i':965
               /\ (!(0 <= K:978) \/ mid_i:979 = K:978)
               /\ (!(0 <= K:978)
                     \/ (-256 * mid_s:980) <= ((-256 * guess_binval:4)
                                                 + (-255 * K:978)))
               /\ ((K:978 = 0 /\ guess_binval:4 = mid_s:980 /\ 0 = mid_i:979)
                     \/ (1 <= K:978
                           /\ 0 <= (-guess_binval:4
                                      + (-256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 1)
                           /\ 0 <= floor((-1/256 * guess_binval:4))
                           /\ 0 <= (255 + guess_binval:4
                                      + (256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= -mid_s:980 /\ 0 <= (-1 + mid_i:979)
                           /\ 0 <= (1 + -mid_i:979)))
               /\ (0 = K:978 \/ !(-guess_binval:4 <= 0))
               /\ (!(0 <= K:981) \/ i':982 = (mid_i:979 + K:981))
               /\ (!(0 <= K:981) \/ s':983 <= mid_s:980)
               /\ ((K:981 = 0 /\ mid_s:980 = s':983 /\ mid_i:979 = i':982)
                     \/ (1 <= K:981 /\ 0 <= (-1 + -mid_i:979 + 1)
                           /\ 0 <= (255 + -mid_s:980
                                      + (256 * floor((1/256 * mid_s:980))))
                           /\ 0 <= floor((1/256 * mid_s:980))
                           /\ 0 <= (mid_s:980
                                      + (-256 * floor((1/256 * mid_s:980))))
                           /\ 0 <= mid_i:979 /\ 0 <= (-1 + i':982)
                           /\ 0 <= s':983 /\ 0 <= (1 + -i':982)))
               /\ (0 = K:981 \/ -mid_s:980 <= 0) /\ (K:978 + K:981) = K:984
               /\ 0 <= K:984 /\ 0 <= i':982 /\ 1 <= i':982
               /\ (s':983 mod 256) <= (s':966 mod 256)
               /\ (s':966 mod 256) <= (s':983 mod 256)
               /\ (!(0 <= K:995) \/ mid_i:996 = K:995)
               /\ (!(0 <= K:995)
                     \/ (-256 * mid_s:997) <= ((-256 * password_binval:5)
                                                 + (-255 * K:995)))
               /\ K:995 = 0 /\ password_binval:5 = mid_s:997 /\ 0 = mid_i:996
               /\ (0 = K:995 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:998) \/ i':999 = (mid_i:996 + K:998))
               /\ (!(0 <= K:998) \/ s':1000 <= mid_s:997)
               /\ ((K:998 = 0 /\ mid_s:997 = s':1000 /\ mid_i:996 = i':999)
                     \/ (1 <= K:998 /\ 0 <= (-1 + -mid_i:996)
                           /\ 0 <= (255 + -mid_s:997
                                      + (256 * floor((1/256 * mid_s:997))))
                           /\ 0 <= floor((1/256 * mid_s:997))
                           /\ 0 <= (mid_s:997
                                      + (-256 * floor((1/256 * mid_s:997))))
                           /\ 0 <= mid_i:996 /\ 0 <= (-1 + i':999)
                           /\ 0 <= s':1000 /\ 0 <= -i':999))
               /\ (0 = K:998 \/ -mid_s:997 <= 0) /\ (K:995 + K:998) = K:1001
               /\ 0 <= K:1001 /\ 0 <= i':999 /\ 0 <= i':999
               /\ (!(0 <= K:1012) \/ mid_i:1013 = K:1012)
               /\ (!(0 <= K:1012)
                     \/ (-256 * mid_s:1014) <= ((-256 * guess_binval:4)
                                                  + (-255 * K:1012)))
               /\ K:1012 = 0 /\ guess_binval:4 = mid_s:1014 /\ 0 = mid_i:1013
               /\ (0 = K:1012 \/ !(-guess_binval:4 <= 0))
               /\ (!(0 <= K:1015) \/ i':1016 = (mid_i:1013 + K:1015))
               /\ (!(0 <= K:1015) \/ s':1017 <= mid_s:1014)
               /\ ((K:1015 = 0 /\ mid_s:1014 = s':1017
                      /\ mid_i:1013 = i':1016)
                     \/ (1 <= K:1015 /\ 0 <= (-1 + -mid_i:1013)
                           /\ 0 <= (255 + -mid_s:1014
                                      + (256 * floor((1/256 * mid_s:1014))))
                           /\ 0 <= floor((1/256 * mid_s:1014))
                           /\ 0 <= (mid_s:1014
                                      + (-256 * floor((1/256 * mid_s:1014))))
                           /\ 0 <= mid_i:1013 /\ 0 <= (-1 + i':1016)
                           /\ 0 <= s':1017 /\ 0 <= -i':1016))
               /\ (0 = K:1015 \/ -mid_s:1014 <= 0)
               /\ (K:1012 + K:1015) = K:1018 /\ 0 <= K:1018 /\ 0 <= i':1016
               /\ 0 <= i':1016
               /\ ((((s':1000 mod 256) < (s':1017 mod 256)
                       \/ (s':1017 mod 256) < (s':1000 mod 256))
                      /\ 2 = phi___retres7:1025)
                     \/ ((s':1017 mod 256) <= (s':1000 mod 256)
                           /\ (s':1000 mod 256) <= (s':1017 mod 256)
                           /\ 3 = phi___retres7:1025))
               /\ (s':932 mod 256) = phi_tmp:1212
               /\ (s':949 mod 256) = phi_tmp___0:1211
               /\ (s':966 mod 256) = phi_tmp___1:1210
               /\ (s':983 mod 256) = phi_tmp___2:1209
               /\ (s':1000 mod 256) = phi_tmp___3:1208
               /\ phi___retres7:1025 = phi___retres7:1207
               /\ (s':1017 mod 256) = phi_return:1206 /\ 0 = phi_param1:1205
               /\ type_err:1019 = phi_return@pos:1204
               /\ type_err:1020 = phi_param0@pos:1203
               /\ type_err:1021 = phi_param1@pos:1202
               /\ type_err:1022 = phi_return@width:1201
               /\ type_err:1023 = phi_param0@width:1200
               /\ type_err:1024 = phi_param1@width:1199))}

Evaluating variable number 37 (using IRE) 

  The IRE-evaluated value on this round is: 

Base relation: 
{return := (s':1223 mod 256)
 param0 := param0:246
 param1 := param1:249
 return@pos := type_err:1227
 param0@pos := type_err:256
 param1@pos := type_err:257
 return@width := type_err:1228
 param0@width := type_err:258
 param1@width := type_err:259
 when ((!(0 <= K:1218) \/ mid_i:1219 = K:1218)
         /\ (!(0 <= K:1218)
               \/ (-256 * mid_s:1220) <= ((-256 * param0:246)
                                            + (-255 * K:1218)))
         /\ ((K:1218 = 0 /\ param0:246 = mid_s:1220 /\ 0 = mid_i:1219)
               \/ (1 <= K:1218
                     /\ 0 <= (-param0:246
                                + (-256 * floor((-1/256 * param0:246))))
                     /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                     /\ 0 <= floor((-1/256 * param0:246))
                     /\ 0 <= (255 + param0:246
                                + (256 * floor((-1/256 * param0:246))))
                     /\ 0 <= -mid_s:1220 /\ 0 <= (-1 + mid_i:1219)
                     /\ 0 <= (param1:249 + -mid_i:1219)))
         /\ (0 = K:1218 \/ !(-param0:246 <= 0))
         /\ (!(0 <= K:1221) \/ i':1222 = (mid_i:1219 + K:1221))
         /\ (!(0 <= K:1221) \/ s':1223 <= mid_s:1220)
         /\ ((K:1221 = 0 /\ mid_s:1220 = s':1223 /\ mid_i:1219 = i':1222)
               \/ (1 <= K:1221 /\ 0 <= (-1 + -mid_i:1219 + param1:249)
                     /\ 0 <= (255 + -mid_s:1220
                                + (256 * floor((1/256 * mid_s:1220))))
                     /\ 0 <= floor((1/256 * mid_s:1220))
                     /\ 0 <= (mid_s:1220
                                + (-256 * floor((1/256 * mid_s:1220))))
                     /\ 0 <= mid_i:1219 /\ 0 <= (-1 + i':1222)
                     /\ 0 <= s':1223 /\ 0 <= (param1:249 + -i':1222)))
         /\ (0 = K:1221 \/ -mid_s:1220 <= 0) /\ (K:1218 + K:1221) = K:1224
         /\ 0 <= K:1224 /\ 0 <= i':1222 /\ param1:249 <= i':1222)}

Evaluating variable number 43 (using IRE) 

  The IRE-evaluated value on this round is: 

Base relation: 
{return := s':359
 return@pos := type_err:361
 return@width := type_err:362
 when ((!(0 <= K:354) \/ mid_i:355 = K:354)
         /\ (!(0 <= K:354)
               \/ (-256 * mid_s:356) <= ((-256 * param0:246) + (-255 * K:354)))
         /\ ((K:354 = 0 /\ param0:246 = mid_s:356 /\ 0 = mid_i:355)
               \/ (1 <= K:354
                     /\ 0 <= (-param0:246
                                + (-256 * floor((-1/256 * param0:246))))
                     /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                     /\ 0 <= floor((-1/256 * param0:246))
                     /\ 0 <= (255 + param0:246
                                + (256 * floor((-1/256 * param0:246))))
                     /\ 0 <= -mid_s:356 /\ 0 <= (-1 + mid_i:355)
                     /\ 0 <= (param1:249 + -mid_i:355)))
         /\ (0 = K:354 \/ !(-param0:246 <= 0))
         /\ (!(0 <= K:357) \/ i':358 = (mid_i:355 + K:357))
         /\ (!(0 <= K:357) \/ s':359 <= mid_s:356)
         /\ ((K:357 = 0 /\ mid_s:356 = s':359 /\ mid_i:355 = i':358)
               \/ (1 <= K:357 /\ 0 <= (-1 + -mid_i:355 + param1:249)
                     /\ 0 <= (255 + -mid_s:356
                                + (256 * floor((1/256 * mid_s:356))))
                     /\ 0 <= floor((1/256 * mid_s:356))
                     /\ 0 <= (mid_s:356 + (-256 * floor((1/256 * mid_s:356))))
                     /\ 0 <= mid_i:355 /\ 0 <= (-1 + i':358) /\ 0 <= s':359
                     /\ 0 <= (param1:249 + -i':358)))
         /\ (0 = K:357 \/ -mid_s:356 <= 0) /\ (K:354 + K:357) = K:360
         /\ 0 <= K:360 /\ 0 <= i':358 /\ param1:249 <= i':358)}

    (IRE-tc) Checking termination condition.
    (IRE-tc)     >> All star bodies equivalent.

NumRnds: 1

Step 6: =========================================================
##### Question automaton as FWPDS
<__pstate, (Unique State Name,50)_g1> -> <__pstate, (Unique State Name,79)_g1>	Base relation: 
{tmp := phi_tmp:1564
 tmp___0 := phi_tmp___0:1563
 tmp___1 := phi_tmp___1:1562
 tmp___2 := phi_tmp___2:1561
 tmp___3 := phi_tmp___3:1560
 return := phi_return:1559
 param0 := phi_param0:1558
 param1 := phi_param1:1557
 return@pos := phi_return@pos:1556
 param0@pos := phi_param0@pos:1555
 param1@pos := phi_param1@pos:1554
 return@width := phi_return@width:1553
 param0@width := phi_param0@width:1552
 param1@width := phi_param1@width:1551
 when ((((((((((0 <= guess_binval:4 /\ 0 <= password_binval:5
                  /\ tmp:34 = phi_tmp:1510 /\ return:14 = phi_return:1509
                  /\ password_binval:5 = phi_param0:1508
                  /\ return@pos:13 = phi_return@pos:1507
                  /\ type_err:93 = phi_param0@pos:1506
                  /\ type_err:95 = phi_param1@pos:1505
                  /\ return@width:12 = phi_return@width:1504
                  /\ type_err:94 = phi_param0@width:1503
                  /\ type_err:96 = phi_param1@width:1502)
                 \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                       /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
                       /\ (!(0 <= K:1378)
                             \/ (-256 * mid_s:1380) <= ((-256
                                                           * password_binval:5)
                                                          + (-255 * K:1378)))
                       /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                              /\ 0 = mid_i:1379)
                             \/ (1 <= K:1378
                                   /\ 0 <= (-password_binval:5
                                              + (-256
                                                   * floor((-1/256
                                                              * password_binval:5))))
                                   /\ 0 <= (-1 + -password_binval:5)
                                   /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * password_binval:5))
                                   /\ 0 <= (255 + password_binval:5
                                              + (256
                                                   * floor((-1/256
                                                              * password_binval:5))))
                                   /\ 0 <= -mid_s:1380
                                   /\ 0 <= (-1 + mid_i:1379)
                                   /\ 0 <= (2 + -mid_i:1379)))
                       /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
                       /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
                       /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
                       /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383
                              /\ mid_i:1379 = i':1382)
                             \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                                   /\ 0 <= (255 + -mid_s:1380
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1380))))
                                   /\ 0 <= floor((1/256 * mid_s:1380))
                                   /\ 0 <= (mid_s:1380
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1380))))
                                   /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                                   /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
                       /\ (0 = K:1381 \/ -mid_s:1380 <= 0)
                       /\ (K:1378 + K:1381) = K:1384 /\ 0 <= K:1384
                       /\ 0 <= i':1382 /\ 2 <= i':1382
                       /\ (s':1383 mod 256) = phi_tmp:1510
                       /\ (s':1383 mod 256) = phi_return:1509
                       /\ guess_binval:4 = phi_param0:1508
                       /\ type_err:1385 = phi_return@pos:1507
                       /\ type_err:1391 = phi_param0@pos:1506
                       /\ type_err:1392 = phi_param1@pos:1505
                       /\ type_err:1388 = phi_return@width:1504
                       /\ type_err:1393 = phi_param0@width:1503
                       /\ type_err:1394 = phi_param1@width:1502))
                /\ phi_tmp:1510 = phi_tmp:1523
                /\ tmp___0:33 = phi_tmp___0:1522
                /\ tmp___1:36 = phi_tmp___1:1521
                /\ tmp___2:35 = phi_tmp___2:1520
                /\ phi_return:1509 = phi_return:1519
                /\ phi_param0:1508 = phi_param0:1518 /\ 2 = phi_param1:1517
                /\ phi_return@pos:1507 = phi_return@pos:1516
                /\ phi_param0@pos:1506 = phi_param0@pos:1515
                /\ phi_param1@pos:1505 = phi_param1@pos:1514
                /\ phi_return@width:1504 = phi_return@width:1513
                /\ phi_param0@width:1503 = phi_param0@width:1512
                /\ phi_param1@width:1502 = phi_param1@width:1511)
               \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                     /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
                     /\ (!(0 <= K:1378)
                           \/ (-256 * mid_s:1380) <= ((-256
                                                         * password_binval:5)
                                                        + (-255 * K:1378)))
                     /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                            /\ 0 = mid_i:1379)
                           \/ (1 <= K:1378
                                 /\ 0 <= (-password_binval:5
                                            + (-256
                                                 * floor((-1/256
                                                            * password_binval:5))))
                                 /\ 0 <= (-1 + -password_binval:5)
                                 /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * password_binval:5))
                                 /\ 0 <= (255 + password_binval:5
                                            + (256
                                                 * floor((-1/256
                                                            * password_binval:5))))
                                 /\ 0 <= -mid_s:1380
                                 /\ 0 <= (-1 + mid_i:1379)
                                 /\ 0 <= (2 + -mid_i:1379)))
                     /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
                     /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
                     /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
                     /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383
                            /\ mid_i:1379 = i':1382)
                           \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                                 /\ 0 <= (255 + -mid_s:1380
                                            + (256
                                                 * floor((1/256 * mid_s:1380))))
                                 /\ 0 <= floor((1/256 * mid_s:1380))
                                 /\ 0 <= (mid_s:1380
                                            + (-256
                                                 * floor((1/256 * mid_s:1380))))
                                 /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                                 /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
                     /\ (0 = K:1381 \/ -mid_s:1380 <= 0)
                     /\ (K:1378 + K:1381) = K:1384 /\ 0 <= K:1384
                     /\ 0 <= i':1382 /\ 2 <= i':1382
                     /\ (!(0 <= K:1395) \/ mid_i:1396 = K:1395)
                     /\ (!(0 <= K:1395)
                           \/ (-256 * mid_s:1397) <= ((-256 * guess_binval:4)
                                                        + (-255 * K:1395)))
                     /\ ((K:1395 = 0 /\ guess_binval:4 = mid_s:1397
                            /\ 0 = mid_i:1396)
                           \/ (1 <= K:1395
                                 /\ 0 <= (-guess_binval:4
                                            + (-256
                                                 * floor((-1/256
                                                            * guess_binval:4))))
                                 /\ 0 <= (-1 + -guess_binval:4)
                                 /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * guess_binval:4))
                                 /\ 0 <= (255 + guess_binval:4
                                            + (256
                                                 * floor((-1/256
                                                            * guess_binval:4))))
                                 /\ 0 <= -mid_s:1397
                                 /\ 0 <= (-1 + mid_i:1396)
                                 /\ 0 <= (2 + -mid_i:1396)))
                     /\ (0 = K:1395 \/ !(-guess_binval:4 <= 0))
                     /\ (!(0 <= K:1398) \/ i':1399 = (mid_i:1396 + K:1398))
                     /\ (!(0 <= K:1398) \/ s':1400 <= mid_s:1397)
                     /\ ((K:1398 = 0 /\ mid_s:1397 = s':1400
                            /\ mid_i:1396 = i':1399)
                           \/ (1 <= K:1398 /\ 0 <= (-1 + -mid_i:1396 + 2)
                                 /\ 0 <= (255 + -mid_s:1397
                                            + (256
                                                 * floor((1/256 * mid_s:1397))))
                                 /\ 0 <= floor((1/256 * mid_s:1397))
                                 /\ 0 <= (mid_s:1397
                                            + (-256
                                                 * floor((1/256 * mid_s:1397))))
                                 /\ 0 <= mid_i:1396 /\ 0 <= (-1 + i':1399)
                                 /\ 0 <= s':1400 /\ 0 <= (2 + -i':1399)))
                     /\ (0 = K:1398 \/ -mid_s:1397 <= 0)
                     /\ (K:1395 + K:1398) = K:1401 /\ 0 <= K:1401
                     /\ 0 <= i':1399 /\ 2 <= i':1399
                     /\ (s':1400 mod 256) <= (s':1383 mod 256)
                     /\ (s':1383 mod 256) <= (s':1400 mod 256)
                     /\ (!(0 <= K:1412) \/ mid_i:1413 = K:1412)
                     /\ (!(0 <= K:1412)
                           \/ (-256 * mid_s:1414) <= ((-256
                                                         * password_binval:5)
                                                        + (-255 * K:1412)))
                     /\ ((K:1412 = 0 /\ password_binval:5 = mid_s:1414
                            /\ 0 = mid_i:1413)
                           \/ (1 <= K:1412
                                 /\ 0 <= (-password_binval:5
                                            + (-256
                                                 * floor((-1/256
                                                            * password_binval:5))))
                                 /\ 0 <= (-1 + -password_binval:5)
                                 /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * password_binval:5))
                                 /\ 0 <= (255 + password_binval:5
                                            + (256
                                                 * floor((-1/256
                                                            * password_binval:5))))
                                 /\ 0 <= -mid_s:1414
                                 /\ 0 <= (-1 + mid_i:1413)
                                 /\ 0 <= (1 + -mid_i:1413)))
                     /\ (0 = K:1412 \/ !(-password_binval:5 <= 0))
                     /\ (!(0 <= K:1415) \/ i':1416 = (mid_i:1413 + K:1415))
                     /\ (!(0 <= K:1415) \/ s':1417 <= mid_s:1414)
                     /\ ((K:1415 = 0 /\ mid_s:1414 = s':1417
                            /\ mid_i:1413 = i':1416)
                           \/ (1 <= K:1415 /\ 0 <= (-1 + -mid_i:1413 + 1)
                                 /\ 0 <= (255 + -mid_s:1414
                                            + (256
                                                 * floor((1/256 * mid_s:1414))))
                                 /\ 0 <= floor((1/256 * mid_s:1414))
                                 /\ 0 <= (mid_s:1414
                                            + (-256
                                                 * floor((1/256 * mid_s:1414))))
                                 /\ 0 <= mid_i:1413 /\ 0 <= (-1 + i':1416)
                                 /\ 0 <= s':1417 /\ 0 <= (1 + -i':1416)))
                     /\ (0 = K:1415 \/ -mid_s:1414 <= 0)
                     /\ (K:1412 + K:1415) = K:1418 /\ 0 <= K:1418
                     /\ 0 <= i':1416 /\ 1 <= i':1416
                     /\ (!(0 <= K:1429) \/ mid_i:1430 = K:1429)
                     /\ (!(0 <= K:1429)
                           \/ (-256 * mid_s:1431) <= ((-256 * guess_binval:4)
                                                        + (-255 * K:1429)))
                     /\ ((K:1429 = 0 /\ guess_binval:4 = mid_s:1431
                            /\ 0 = mid_i:1430)
                           \/ (1 <= K:1429
                                 /\ 0 <= (-guess_binval:4
                                            + (-256
                                                 * floor((-1/256
                                                            * guess_binval:4))))
                                 /\ 0 <= (-1 + -guess_binval:4)
                                 /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * guess_binval:4))
                                 /\ 0 <= (255 + guess_binval:4
                                            + (256
                                                 * floor((-1/256
                                                            * guess_binval:4))))
                                 /\ 0 <= -mid_s:1431
                                 /\ 0 <= (-1 + mid_i:1430)
                                 /\ 0 <= (1 + -mid_i:1430)))
                     /\ (0 = K:1429 \/ !(-guess_binval:4 <= 0))
                     /\ (!(0 <= K:1432) \/ i':1433 = (mid_i:1430 + K:1432))
                     /\ (!(0 <= K:1432) \/ s':1434 <= mid_s:1431)
                     /\ ((K:1432 = 0 /\ mid_s:1431 = s':1434
                            /\ mid_i:1430 = i':1433)
                           \/ (1 <= K:1432 /\ 0 <= (-1 + -mid_i:1430 + 1)
                                 /\ 0 <= (255 + -mid_s:1431
                                            + (256
                                                 * floor((1/256 * mid_s:1431))))
                                 /\ 0 <= floor((1/256 * mid_s:1431))
                                 /\ 0 <= (mid_s:1431
                                            + (-256
                                                 * floor((1/256 * mid_s:1431))))
                                 /\ 0 <= mid_i:1430 /\ 0 <= (-1 + i':1433)
                                 /\ 0 <= s':1434 /\ 0 <= (1 + -i':1433)))
                     /\ (0 = K:1432 \/ -mid_s:1431 <= 0)
                     /\ (K:1429 + K:1432) = K:1435 /\ 0 <= K:1435
                     /\ 0 <= i':1433 /\ 1 <= i':1433
                     /\ (s':1434 mod 256) <= (s':1417 mod 256)
                     /\ (s':1417 mod 256) <= (s':1434 mod 256)
                     /\ (s':1383 mod 256) = phi_tmp:1523
                     /\ (s':1400 mod 256) = phi_tmp___0:1522
                     /\ (s':1417 mod 256) = phi_tmp___1:1521
                     /\ (s':1434 mod 256) = phi_tmp___2:1520
                     /\ (s':1434 mod 256) = phi_return:1519
                     /\ password_binval:5 = phi_param0:1518
                     /\ 0 = phi_param1:1517
                     /\ type_err:1436 = phi_return@pos:1516
                     /\ type_err:1453 = phi_param0@pos:1515
                     /\ type_err:1454 = phi_param1@pos:1514
                     /\ type_err:1439 = phi_return@width:1513
                     /\ type_err:1455 = phi_param0@width:1512
                     /\ type_err:1456 = phi_param1@width:1511))
              /\ phi_tmp:1523 = phi_tmp:1536
              /\ phi_tmp___0:1522 = phi_tmp___0:1535
              /\ phi_tmp___1:1521 = phi_tmp___1:1534
              /\ phi_tmp___2:1520 = phi_tmp___2:1533
              /\ phi_return:1519 = phi_return:1532
              /\ phi_param0:1518 = phi_param0:1531
              /\ phi_param1:1517 = phi_param1:1530
              /\ phi_return@pos:1516 = phi_return@pos:1529
              /\ phi_param0@pos:1515 = phi_param0@pos:1528
              /\ phi_param1@pos:1514 = phi_param1@pos:1527
              /\ phi_return@width:1513 = phi_return@width:1526
              /\ phi_param0@width:1512 = phi_param0@width:1525
              /\ phi_param1@width:1511 = phi_param1@width:1524)
             \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                   /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
                   /\ (!(0 <= K:1378)
                         \/ (-256 * mid_s:1380) <= ((-256 * password_binval:5)
                                                      + (-255 * K:1378)))
                   /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                          /\ 0 = mid_i:1379)
                         \/ (1 <= K:1378
                               /\ 0 <= (-password_binval:5
                                          + (-256
                                               * floor((-1/256
                                                          * password_binval:5))))
                               /\ 0 <= (-1 + -password_binval:5)
                               /\ 0 <= (-1 + 2)
                               /\ 0 <= floor((-1/256 * password_binval:5))
                               /\ 0 <= (255 + password_binval:5
                                          + (256
                                               * floor((-1/256
                                                          * password_binval:5))))
                               /\ 0 <= -mid_s:1380 /\ 0 <= (-1 + mid_i:1379)
                               /\ 0 <= (2 + -mid_i:1379)))
                   /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
                   /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
                   /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
                   /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383
                          /\ mid_i:1379 = i':1382)
                         \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                               /\ 0 <= (255 + -mid_s:1380
                                          + (256
                                               * floor((1/256 * mid_s:1380))))
                               /\ 0 <= floor((1/256 * mid_s:1380))
                               /\ 0 <= (mid_s:1380
                                          + (-256
                                               * floor((1/256 * mid_s:1380))))
                               /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                               /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
                   /\ (0 = K:1381 \/ -mid_s:1380 <= 0)
                   /\ (K:1378 + K:1381) = K:1384 /\ 0 <= K:1384
                   /\ 0 <= i':1382 /\ 2 <= i':1382
                   /\ (!(0 <= K:1395) \/ mid_i:1396 = K:1395)
                   /\ (!(0 <= K:1395)
                         \/ (-256 * mid_s:1397) <= ((-256 * guess_binval:4)
                                                      + (-255 * K:1395)))
                   /\ ((K:1395 = 0 /\ guess_binval:4 = mid_s:1397
                          /\ 0 = mid_i:1396)
                         \/ (1 <= K:1395
                               /\ 0 <= (-guess_binval:4
                                          + (-256
                                               * floor((-1/256
                                                          * guess_binval:4))))
                               /\ 0 <= (-1 + -guess_binval:4)
                               /\ 0 <= (-1 + 2)
                               /\ 0 <= floor((-1/256 * guess_binval:4))
                               /\ 0 <= (255 + guess_binval:4
                                          + (256
                                               * floor((-1/256
                                                          * guess_binval:4))))
                               /\ 0 <= -mid_s:1397 /\ 0 <= (-1 + mid_i:1396)
                               /\ 0 <= (2 + -mid_i:1396)))
                   /\ (0 = K:1395 \/ !(-guess_binval:4 <= 0))
                   /\ (!(0 <= K:1398) \/ i':1399 = (mid_i:1396 + K:1398))
                   /\ (!(0 <= K:1398) \/ s':1400 <= mid_s:1397)
                   /\ ((K:1398 = 0 /\ mid_s:1397 = s':1400
                          /\ mid_i:1396 = i':1399)
                         \/ (1 <= K:1398 /\ 0 <= (-1 + -mid_i:1396 + 2)
                               /\ 0 <= (255 + -mid_s:1397
                                          + (256
                                               * floor((1/256 * mid_s:1397))))
                               /\ 0 <= floor((1/256 * mid_s:1397))
                               /\ 0 <= (mid_s:1397
                                          + (-256
                                               * floor((1/256 * mid_s:1397))))
                               /\ 0 <= mid_i:1396 /\ 0 <= (-1 + i':1399)
                               /\ 0 <= s':1400 /\ 0 <= (2 + -i':1399)))
                   /\ (0 = K:1398 \/ -mid_s:1397 <= 0)
                   /\ (K:1395 + K:1398) = K:1401 /\ 0 <= K:1401
                   /\ 0 <= i':1399 /\ 2 <= i':1399
                   /\ (s':1400 mod 256) <= (s':1383 mod 256)
                   /\ (s':1383 mod 256) <= (s':1400 mod 256)
                   /\ (s':1383 mod 256) = phi_tmp:1536
                   /\ (s':1400 mod 256) = phi_tmp___0:1535
                   /\ tmp___1:36 = phi_tmp___1:1534
                   /\ tmp___2:35 = phi_tmp___2:1533
                   /\ (s':1400 mod 256) = phi_return:1532
                   /\ password_binval:5 = phi_param0:1531
                   /\ 1 = phi_param1:1530
                   /\ type_err:1402 = phi_return@pos:1529
                   /\ type_err:1408 = phi_param0@pos:1528
                   /\ type_err:1409 = phi_param1@pos:1527
                   /\ type_err:1405 = phi_return@width:1526
                   /\ type_err:1410 = phi_param0@width:1525
                   /\ type_err:1411 = phi_param1@width:1524))
            /\ phi_tmp:1536 = phi_tmp:1550
            /\ phi_tmp___0:1535 = phi_tmp___0:1549
            /\ phi_tmp___1:1534 = phi_tmp___1:1548
            /\ phi_tmp___2:1533 = phi_tmp___2:1547
            /\ tmp___3:38 = phi_tmp___3:1546
            /\ phi_return:1532 = phi_return:1545
            /\ phi_param0:1531 = phi_param0:1544
            /\ phi_param1:1530 = phi_param1:1543
            /\ phi_return@pos:1529 = phi_return@pos:1542
            /\ phi_param0@pos:1528 = phi_param0@pos:1541
            /\ phi_param1@pos:1527 = phi_param1@pos:1540
            /\ phi_return@width:1526 = phi_return@width:1539
            /\ phi_param0@width:1525 = phi_param0@width:1538
            /\ phi_param1@width:1524 = phi_param1@width:1537)
           \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                 /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
                 /\ (!(0 <= K:1378)
                       \/ (-256 * mid_s:1380) <= ((-256 * password_binval:5)
                                                    + (-255 * K:1378)))
                 /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                        /\ 0 = mid_i:1379)
                       \/ (1 <= K:1378
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:1380 /\ 0 <= (-1 + mid_i:1379)
                             /\ 0 <= (2 + -mid_i:1379)))
                 /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
                 /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
                 /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383
                        /\ mid_i:1379 = i':1382)
                       \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                             /\ 0 <= (255 + -mid_s:1380
                                        + (256 * floor((1/256 * mid_s:1380))))
                             /\ 0 <= floor((1/256 * mid_s:1380))
                             /\ 0 <= (mid_s:1380
                                        + (-256 * floor((1/256 * mid_s:1380))))
                             /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                             /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
                 /\ (0 = K:1381 \/ -mid_s:1380 <= 0)
                 /\ (K:1378 + K:1381) = K:1384 /\ 0 <= K:1384 /\ 0 <= i':1382
                 /\ 2 <= i':1382 /\ (!(0 <= K:1395) \/ mid_i:1396 = K:1395)
                 /\ (!(0 <= K:1395)
                       \/ (-256 * mid_s:1397) <= ((-256 * guess_binval:4)
                                                    + (-255 * K:1395)))
                 /\ ((K:1395 = 0 /\ guess_binval:4 = mid_s:1397
                        /\ 0 = mid_i:1396)
                       \/ (1 <= K:1395
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:1397 /\ 0 <= (-1 + mid_i:1396)
                             /\ 0 <= (2 + -mid_i:1396)))
                 /\ (0 = K:1395 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:1398) \/ i':1399 = (mid_i:1396 + K:1398))
                 /\ (!(0 <= K:1398) \/ s':1400 <= mid_s:1397)
                 /\ ((K:1398 = 0 /\ mid_s:1397 = s':1400
                        /\ mid_i:1396 = i':1399)
                       \/ (1 <= K:1398 /\ 0 <= (-1 + -mid_i:1396 + 2)
                             /\ 0 <= (255 + -mid_s:1397
                                        + (256 * floor((1/256 * mid_s:1397))))
                             /\ 0 <= floor((1/256 * mid_s:1397))
                             /\ 0 <= (mid_s:1397
                                        + (-256 * floor((1/256 * mid_s:1397))))
                             /\ 0 <= mid_i:1396 /\ 0 <= (-1 + i':1399)
                             /\ 0 <= s':1400 /\ 0 <= (2 + -i':1399)))
                 /\ (0 = K:1398 \/ -mid_s:1397 <= 0)
                 /\ (K:1395 + K:1398) = K:1401 /\ 0 <= K:1401 /\ 0 <= i':1399
                 /\ 2 <= i':1399 /\ (s':1400 mod 256) <= (s':1383 mod 256)
                 /\ (s':1383 mod 256) <= (s':1400 mod 256)
                 /\ (!(0 <= K:1412) \/ mid_i:1413 = K:1412)
                 /\ (!(0 <= K:1412)
                       \/ (-256 * mid_s:1414) <= ((-256 * password_binval:5)
                                                    + (-255 * K:1412)))
                 /\ ((K:1412 = 0 /\ password_binval:5 = mid_s:1414
                        /\ 0 = mid_i:1413)
                       \/ (1 <= K:1412
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:1414 /\ 0 <= (-1 + mid_i:1413)
                             /\ 0 <= (1 + -mid_i:1413)))
                 /\ (0 = K:1412 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:1415) \/ i':1416 = (mid_i:1413 + K:1415))
                 /\ (!(0 <= K:1415) \/ s':1417 <= mid_s:1414)
                 /\ ((K:1415 = 0 /\ mid_s:1414 = s':1417
                        /\ mid_i:1413 = i':1416)
                       \/ (1 <= K:1415 /\ 0 <= (-1 + -mid_i:1413 + 1)
                             /\ 0 <= (255 + -mid_s:1414
                                        + (256 * floor((1/256 * mid_s:1414))))
                             /\ 0 <= floor((1/256 * mid_s:1414))
                             /\ 0 <= (mid_s:1414
                                        + (-256 * floor((1/256 * mid_s:1414))))
                             /\ 0 <= mid_i:1413 /\ 0 <= (-1 + i':1416)
                             /\ 0 <= s':1417 /\ 0 <= (1 + -i':1416)))
                 /\ (0 = K:1415 \/ -mid_s:1414 <= 0)
                 /\ (K:1412 + K:1415) = K:1418 /\ 0 <= K:1418 /\ 0 <= i':1416
                 /\ 1 <= i':1416 /\ (!(0 <= K:1429) \/ mid_i:1430 = K:1429)
                 /\ (!(0 <= K:1429)
                       \/ (-256 * mid_s:1431) <= ((-256 * guess_binval:4)
                                                    + (-255 * K:1429)))
                 /\ ((K:1429 = 0 /\ guess_binval:4 = mid_s:1431
                        /\ 0 = mid_i:1430)
                       \/ (1 <= K:1429
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:1431 /\ 0 <= (-1 + mid_i:1430)
                             /\ 0 <= (1 + -mid_i:1430)))
                 /\ (0 = K:1429 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:1432) \/ i':1433 = (mid_i:1430 + K:1432))
                 /\ (!(0 <= K:1432) \/ s':1434 <= mid_s:1431)
                 /\ ((K:1432 = 0 /\ mid_s:1431 = s':1434
                        /\ mid_i:1430 = i':1433)
                       \/ (1 <= K:1432 /\ 0 <= (-1 + -mid_i:1430 + 1)
                             /\ 0 <= (255 + -mid_s:1431
                                        + (256 * floor((1/256 * mid_s:1431))))
                             /\ 0 <= floor((1/256 * mid_s:1431))
                             /\ 0 <= (mid_s:1431
                                        + (-256 * floor((1/256 * mid_s:1431))))
                             /\ 0 <= mid_i:1430 /\ 0 <= (-1 + i':1433)
                             /\ 0 <= s':1434 /\ 0 <= (1 + -i':1433)))
                 /\ (0 = K:1432 \/ -mid_s:1431 <= 0)
                 /\ (K:1429 + K:1432) = K:1435 /\ 0 <= K:1435 /\ 0 <= i':1433
                 /\ 1 <= i':1433 /\ (s':1434 mod 256) <= (s':1417 mod 256)
                 /\ (s':1417 mod 256) <= (s':1434 mod 256)
                 /\ (!(0 <= K:1457) \/ mid_i:1458 = K:1457)
                 /\ (!(0 <= K:1457)
                       \/ (-256 * mid_s:1459) <= ((-256 * password_binval:5)
                                                    + (-255 * K:1457)))
                 /\ K:1457 = 0 /\ password_binval:5 = mid_s:1459
                 /\ 0 = mid_i:1458
                 /\ (0 = K:1457 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:1460) \/ i':1461 = (mid_i:1458 + K:1460))
                 /\ (!(0 <= K:1460) \/ s':1462 <= mid_s:1459)
                 /\ ((K:1460 = 0 /\ mid_s:1459 = s':1462
                        /\ mid_i:1458 = i':1461)
                       \/ (1 <= K:1460 /\ 0 <= (-1 + -mid_i:1458)
                             /\ 0 <= (255 + -mid_s:1459
                                        + (256 * floor((1/256 * mid_s:1459))))
                             /\ 0 <= floor((1/256 * mid_s:1459))
                             /\ 0 <= (mid_s:1459
                                        + (-256 * floor((1/256 * mid_s:1459))))
                             /\ 0 <= mid_i:1458 /\ 0 <= (-1 + i':1461)
                             /\ 0 <= s':1462 /\ 0 <= -i':1461))
                 /\ (0 = K:1460 \/ -mid_s:1459 <= 0)
                 /\ (K:1457 + K:1460) = K:1463 /\ 0 <= K:1463 /\ 0 <= i':1461
                 /\ 0 <= i':1461 /\ (s':1383 mod 256) = phi_tmp:1550
                 /\ (s':1400 mod 256) = phi_tmp___0:1549
                 /\ (s':1417 mod 256) = phi_tmp___1:1548
                 /\ (s':1434 mod 256) = phi_tmp___2:1547
                 /\ (s':1462 mod 256) = phi_tmp___3:1546
                 /\ (s':1462 mod 256) = phi_return:1545
                 /\ guess_binval:4 = phi_param0:1544 /\ 0 = phi_param1:1543
                 /\ type_err:1464 = phi_return@pos:1542
                 /\ type_err:1470 = phi_param0@pos:1541
                 /\ type_err:1471 = phi_param1@pos:1540
                 /\ type_err:1467 = phi_return@width:1539
                 /\ type_err:1472 = phi_param0@width:1538
                 /\ type_err:1473 = phi_param1@width:1537))
          /\ phi_tmp:1550 = phi_tmp:1564
          /\ phi_tmp___0:1549 = phi_tmp___0:1563
          /\ phi_tmp___1:1548 = phi_tmp___1:1562
          /\ phi_tmp___2:1547 = phi_tmp___2:1561
          /\ phi_tmp___3:1546 = phi_tmp___3:1560
          /\ phi_return:1545 = phi_return:1559
          /\ phi_param0:1544 = phi_param0:1558
          /\ phi_param1:1543 = phi_param1:1557
          /\ phi_return@pos:1542 = phi_return@pos:1556
          /\ phi_param0@pos:1541 = phi_param0@pos:1555
          /\ phi_param1@pos:1540 = phi_param1@pos:1554
          /\ phi_return@width:1539 = phi_return@width:1553
          /\ phi_param0@width:1538 = phi_param0@width:1552
          /\ phi_param1@width:1537 = phi_param1@width:1551)
         \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
               /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
               /\ (!(0 <= K:1378)
                     \/ (-256 * mid_s:1380) <= ((-256 * password_binval:5)
                                                  + (-255 * K:1378)))
               /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                      /\ 0 = mid_i:1379)
                     \/ (1 <= K:1378
                           /\ 0 <= (-password_binval:5
                                      + (-256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 2)
                           /\ 0 <= floor((-1/256 * password_binval:5))
                           /\ 0 <= (255 + password_binval:5
                                      + (256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= -mid_s:1380 /\ 0 <= (-1 + mid_i:1379)
                           /\ 0 <= (2 + -mid_i:1379)))
               /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
               /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
               /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383
                      /\ mid_i:1379 = i':1382)
                     \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                           /\ 0 <= (255 + -mid_s:1380
                                      + (256 * floor((1/256 * mid_s:1380))))
                           /\ 0 <= floor((1/256 * mid_s:1380))
                           /\ 0 <= (mid_s:1380
                                      + (-256 * floor((1/256 * mid_s:1380))))
                           /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                           /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
               /\ (0 = K:1381 \/ -mid_s:1380 <= 0)
               /\ (K:1378 + K:1381) = K:1384 /\ 0 <= K:1384 /\ 0 <= i':1382
               /\ 2 <= i':1382 /\ (!(0 <= K:1395) \/ mid_i:1396 = K:1395)
               /\ (!(0 <= K:1395)
                     \/ (-256 * mid_s:1397) <= ((-256 * guess_binval:4)
                                                  + (-255 * K:1395)))
               /\ ((K:1395 = 0 /\ guess_binval:4 = mid_s:1397
                      /\ 0 = mid_i:1396)
                     \/ (1 <= K:1395
                           /\ 0 <= (-guess_binval:4
                                      + (-256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                           /\ 0 <= floor((-1/256 * guess_binval:4))
                           /\ 0 <= (255 + guess_binval:4
                                      + (256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= -mid_s:1397 /\ 0 <= (-1 + mid_i:1396)
                           /\ 0 <= (2 + -mid_i:1396)))
               /\ (0 = K:1395 \/ !(-guess_binval:4 <= 0))
               /\ (!(0 <= K:1398) \/ i':1399 = (mid_i:1396 + K:1398))
               /\ (!(0 <= K:1398) \/ s':1400 <= mid_s:1397)
               /\ ((K:1398 = 0 /\ mid_s:1397 = s':1400
                      /\ mid_i:1396 = i':1399)
                     \/ (1 <= K:1398 /\ 0 <= (-1 + -mid_i:1396 + 2)
                           /\ 0 <= (255 + -mid_s:1397
                                      + (256 * floor((1/256 * mid_s:1397))))
                           /\ 0 <= floor((1/256 * mid_s:1397))
                           /\ 0 <= (mid_s:1397
                                      + (-256 * floor((1/256 * mid_s:1397))))
                           /\ 0 <= mid_i:1396 /\ 0 <= (-1 + i':1399)
                           /\ 0 <= s':1400 /\ 0 <= (2 + -i':1399)))
               /\ (0 = K:1398 \/ -mid_s:1397 <= 0)
               /\ (K:1395 + K:1398) = K:1401 /\ 0 <= K:1401 /\ 0 <= i':1399
               /\ 2 <= i':1399 /\ (s':1400 mod 256) <= (s':1383 mod 256)
               /\ (s':1383 mod 256) <= (s':1400 mod 256)
               /\ (!(0 <= K:1412) \/ mid_i:1413 = K:1412)
               /\ (!(0 <= K:1412)
                     \/ (-256 * mid_s:1414) <= ((-256 * password_binval:5)
                                                  + (-255 * K:1412)))
               /\ ((K:1412 = 0 /\ password_binval:5 = mid_s:1414
                      /\ 0 = mid_i:1413)
                     \/ (1 <= K:1412
                           /\ 0 <= (-password_binval:5
                                      + (-256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 1)
                           /\ 0 <= floor((-1/256 * password_binval:5))
                           /\ 0 <= (255 + password_binval:5
                                      + (256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= -mid_s:1414 /\ 0 <= (-1 + mid_i:1413)
                           /\ 0 <= (1 + -mid_i:1413)))
               /\ (0 = K:1412 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:1415) \/ i':1416 = (mid_i:1413 + K:1415))
               /\ (!(0 <= K:1415) \/ s':1417 <= mid_s:1414)
               /\ ((K:1415 = 0 /\ mid_s:1414 = s':1417
                      /\ mid_i:1413 = i':1416)
                     \/ (1 <= K:1415 /\ 0 <= (-1 + -mid_i:1413 + 1)
                           /\ 0 <= (255 + -mid_s:1414
                                      + (256 * floor((1/256 * mid_s:1414))))
                           /\ 0 <= floor((1/256 * mid_s:1414))
                           /\ 0 <= (mid_s:1414
                                      + (-256 * floor((1/256 * mid_s:1414))))
                           /\ 0 <= mid_i:1413 /\ 0 <= (-1 + i':1416)
                           /\ 0 <= s':1417 /\ 0 <= (1 + -i':1416)))
               /\ (0 = K:1415 \/ -mid_s:1414 <= 0)
               /\ (K:1412 + K:1415) = K:1418 /\ 0 <= K:1418 /\ 0 <= i':1416
               /\ 1 <= i':1416 /\ (s':1383 mod 256) = phi_tmp:1564
               /\ (s':1400 mod 256) = phi_tmp___0:1563
               /\ (s':1417 mod 256) = phi_tmp___1:1562
               /\ tmp___2:35 = phi_tmp___2:1561
               /\ tmp___3:38 = phi_tmp___3:1560
               /\ (s':1417 mod 256) = phi_return:1559
               /\ guess_binval:4 = phi_param0:1558 /\ 1 = phi_param1:1557
               /\ type_err:1419 = phi_return@pos:1556
               /\ type_err:1425 = phi_param0@pos:1555
               /\ type_err:1426 = phi_param1@pos:1554
               /\ type_err:1422 = phi_return@width:1553
               /\ type_err:1427 = phi_param0@width:1552
               /\ type_err:1428 = phi_param1@width:1551))}	
<__pstate, (Unique State Name,79)_g1> -> <__pstate, (Unique State Name,72)_g1>	Base relation: 
{param0 := param0:246
 param1 := param1:249
 param0@pos := type_err:256
 param1@pos := type_err:257
 param0@width := type_err:258
 param1@width := type_err:259}	
<__pstate, accept> -> <__pstate, (Unique State Name,50)_g1>	Base relation: 
{password_binval := havoc:15
 guess_binval := havoc:0
 when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
         /\ havoc:15 < 16777216)}	
##### QUERY2
WFA -
  Initial State : __pstate
  Q: {__pstate, __done}
  F: {__done}
    ( __pstate , accept , __done )	Base relation: 
{}

Weights on states: 
__done 0x4055e20: 
	Weight: Base relation: 
{when false}
	Accept: Base relation: 
{}
__pstate 0x4c284a0: 
	Weight: Base relation: 
{when false}
	Accept: Base relation: 
{when false}
##### ANS
WFA -
  Initial State : __pstate
  Q: {__pstate, __done}
  F: {__done}
    ( __pstate , accept , __done )	Base relation: 
{}
    ( __pstate , (Unique State Name,79)_g1 , __done )	Base relation: 
{password_binval := havoc:15
 guess_binval := havoc:0
 tmp := phi_tmp:1677
 tmp___0 := phi_tmp___0:1678
 tmp___1 := phi_tmp___1:1679
 tmp___2 := phi_tmp___2:1680
 tmp___3 := phi_tmp___3:1681
 return := phi_return:1682
 param0 := phi_param0:1683
 param1 := phi_param1:1684
 return@pos := phi_return@pos:1685
 param0@pos := phi_param0@pos:1686
 param1@pos := phi_param1@pos:1687
 return@width := phi_return@width:1688
 param0@width := phi_param0@width:1689
 param1@width := phi_param1@width:1690
 when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
         /\ havoc:15 < 16777216
         /\ ((((((((((0 <= havoc:0 /\ 0 <= havoc:15 /\ tmp:34 = phi_tmp:1565
                        /\ return:14 = phi_return:1566
                        /\ havoc:15 = phi_param0:1567
                        /\ return@pos:13 = phi_return@pos:1568
                        /\ type_err:1569 = phi_param0@pos:1570
                        /\ type_err:1571 = phi_param1@pos:1572
                        /\ return@width:12 = phi_return@width:1573
                        /\ type_err:1574 = phi_param0@width:1575
                        /\ type_err:1576 = phi_param1@width:1577)
                       \/ (0 <= havoc:0 /\ 0 <= havoc:15
                             /\ (!(0 <= K:1578) \/ mid_i:1579 = K:1578)
                             /\ (!(0 <= K:1578)
                                   \/ (-256 * mid_s:1580) <= ((-256
                                                                 * havoc:15)
                                                                + (-255
                                                                    * K:1578)))
                             /\ ((K:1578 = 0 /\ havoc:15 = mid_s:1580
                                    /\ 0 = mid_i:1579)
                                   \/ (1 <= K:1578
                                         /\ 0 <= (-havoc:15
                                                    + (-256
                                                         * floor((-1/256
                                                                    * havoc:15))))
                                         /\ 0 <= (-1 + -havoc:15)
                                         /\ 0 <= (-1 + 2)
                                         /\ 0 <= floor((-1/256 * havoc:15))
                                         /\ 0 <= (255 + havoc:15
                                                    + (256
                                                         * floor((-1/256
                                                                    * havoc:15))))
                                         /\ 0 <= -mid_s:1580
                                         /\ 0 <= (-1 + mid_i:1579)
                                         /\ 0 <= (2 + -mid_i:1579)))
                             /\ (0 = K:1578 \/ !(-havoc:15 <= 0))
                             /\ (!(0 <= K:1581)
                                   \/ i':1582 = (mid_i:1579 + K:1581))
                             /\ (!(0 <= K:1581) \/ s':1583 <= mid_s:1580)
                             /\ ((K:1581 = 0 /\ mid_s:1580 = s':1583
                                    /\ mid_i:1579 = i':1582)
                                   \/ (1 <= K:1581
                                         /\ 0 <= (-1 + -mid_i:1579 + 2)
                                         /\ 0 <= (255 + -mid_s:1580
                                                    + (256
                                                         * floor((1/256
                                                                    * mid_s:1580))))
                                         /\ 0 <= floor((1/256 * mid_s:1580))
                                         /\ 0 <= (mid_s:1580
                                                    + (-256
                                                         * floor((1/256
                                                                    * mid_s:1580))))
                                         /\ 0 <= mid_i:1579
                                         /\ 0 <= (-1 + i':1582)
                                         /\ 0 <= s':1583
                                         /\ 0 <= (2 + -i':1582)))
                             /\ (0 = K:1581 \/ -mid_s:1580 <= 0)
                             /\ (K:1578 + K:1581) = K:1584 /\ 0 <= K:1584
                             /\ 0 <= i':1582 /\ 2 <= i':1582
                             /\ (s':1583 mod 256) = phi_tmp:1565
                             /\ (s':1583 mod 256) = phi_return:1566
                             /\ havoc:0 = phi_param0:1567
                             /\ type_err:1585 = phi_return@pos:1568
                             /\ type_err:1586 = phi_param0@pos:1570
                             /\ type_err:1587 = phi_param1@pos:1572
                             /\ type_err:1588 = phi_return@width:1573
                             /\ type_err:1589 = phi_param0@width:1575
                             /\ type_err:1590 = phi_param1@width:1577))
                      /\ phi_tmp:1565 = phi_tmp:1591
                      /\ tmp___0:33 = phi_tmp___0:1592
                      /\ tmp___1:36 = phi_tmp___1:1593
                      /\ tmp___2:35 = phi_tmp___2:1594
                      /\ phi_return:1566 = phi_return:1595
                      /\ phi_param0:1567 = phi_param0:1596
                      /\ 2 = phi_param1:1597
                      /\ phi_return@pos:1568 = phi_return@pos:1598
                      /\ phi_param0@pos:1570 = phi_param0@pos:1599
                      /\ phi_param1@pos:1572 = phi_param1@pos:1600
                      /\ phi_return@width:1573 = phi_return@width:1601
                      /\ phi_param0@width:1575 = phi_param0@width:1602
                      /\ phi_param1@width:1577 = phi_param1@width:1603)
                     \/ (0 <= havoc:0 /\ 0 <= havoc:15
                           /\ (!(0 <= K:1578) \/ mid_i:1579 = K:1578)
                           /\ (!(0 <= K:1578)
                                 \/ (-256 * mid_s:1580) <= ((-256 * havoc:15)
                                                              + (-255
                                                                   * K:1578)))
                           /\ ((K:1578 = 0 /\ havoc:15 = mid_s:1580
                                  /\ 0 = mid_i:1579)
                                 \/ (1 <= K:1578
                                       /\ 0 <= (-havoc:15
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= (-1 + -havoc:15)
                                       /\ 0 <= (-1 + 2)
                                       /\ 0 <= floor((-1/256 * havoc:15))
                                       /\ 0 <= (255 + havoc:15
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= -mid_s:1580
                                       /\ 0 <= (-1 + mid_i:1579)
                                       /\ 0 <= (2 + -mid_i:1579)))
                           /\ (0 = K:1578 \/ !(-havoc:15 <= 0))
                           /\ (!(0 <= K:1581)
                                 \/ i':1582 = (mid_i:1579 + K:1581))
                           /\ (!(0 <= K:1581) \/ s':1583 <= mid_s:1580)
                           /\ ((K:1581 = 0 /\ mid_s:1580 = s':1583
                                  /\ mid_i:1579 = i':1582)
                                 \/ (1 <= K:1581
                                       /\ 0 <= (-1 + -mid_i:1579 + 2)
                                       /\ 0 <= (255 + -mid_s:1580
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1580))))
                                       /\ 0 <= floor((1/256 * mid_s:1580))
                                       /\ 0 <= (mid_s:1580
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1580))))
                                       /\ 0 <= mid_i:1579
                                       /\ 0 <= (-1 + i':1582) /\ 0 <= s':1583
                                       /\ 0 <= (2 + -i':1582)))
                           /\ (0 = K:1581 \/ -mid_s:1580 <= 0)
                           /\ (K:1578 + K:1581) = K:1584 /\ 0 <= K:1584
                           /\ 0 <= i':1582 /\ 2 <= i':1582
                           /\ (!(0 <= K:1604) \/ mid_i:1605 = K:1604)
                           /\ (!(0 <= K:1604)
                                 \/ (-256 * mid_s:1606) <= ((-256 * havoc:0)
                                                              + (-255
                                                                   * K:1604)))
                           /\ ((K:1604 = 0 /\ havoc:0 = mid_s:1606
                                  /\ 0 = mid_i:1605)
                                 \/ (1 <= K:1604
                                       /\ 0 <= (-havoc:0
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= (-1 + -havoc:0)
                                       /\ 0 <= (-1 + 2)
                                       /\ 0 <= floor((-1/256 * havoc:0))
                                       /\ 0 <= (255 + havoc:0
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= -mid_s:1606
                                       /\ 0 <= (-1 + mid_i:1605)
                                       /\ 0 <= (2 + -mid_i:1605)))
                           /\ (0 = K:1604 \/ !(-havoc:0 <= 0))
                           /\ (!(0 <= K:1607)
                                 \/ i':1608 = (mid_i:1605 + K:1607))
                           /\ (!(0 <= K:1607) \/ s':1609 <= mid_s:1606)
                           /\ ((K:1607 = 0 /\ mid_s:1606 = s':1609
                                  /\ mid_i:1605 = i':1608)
                                 \/ (1 <= K:1607
                                       /\ 0 <= (-1 + -mid_i:1605 + 2)
                                       /\ 0 <= (255 + -mid_s:1606
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1606))))
                                       /\ 0 <= floor((1/256 * mid_s:1606))
                                       /\ 0 <= (mid_s:1606
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1606))))
                                       /\ 0 <= mid_i:1605
                                       /\ 0 <= (-1 + i':1608) /\ 0 <= s':1609
                                       /\ 0 <= (2 + -i':1608)))
                           /\ (0 = K:1607 \/ -mid_s:1606 <= 0)
                           /\ (K:1604 + K:1607) = K:1610 /\ 0 <= K:1610
                           /\ 0 <= i':1608 /\ 2 <= i':1608
                           /\ (s':1609 mod 256) <= (s':1583 mod 256)
                           /\ (s':1583 mod 256) <= (s':1609 mod 256)
                           /\ (!(0 <= K:1611) \/ mid_i:1612 = K:1611)
                           /\ (!(0 <= K:1611)
                                 \/ (-256 * mid_s:1613) <= ((-256 * havoc:15)
                                                              + (-255
                                                                   * K:1611)))
                           /\ ((K:1611 = 0 /\ havoc:15 = mid_s:1613
                                  /\ 0 = mid_i:1612)
                                 \/ (1 <= K:1611
                                       /\ 0 <= (-havoc:15
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= (-1 + -havoc:15)
                                       /\ 0 <= (-1 + 1)
                                       /\ 0 <= floor((-1/256 * havoc:15))
                                       /\ 0 <= (255 + havoc:15
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= -mid_s:1613
                                       /\ 0 <= (-1 + mid_i:1612)
                                       /\ 0 <= (1 + -mid_i:1612)))
                           /\ (0 = K:1611 \/ !(-havoc:15 <= 0))
                           /\ (!(0 <= K:1614)
                                 \/ i':1615 = (mid_i:1612 + K:1614))
                           /\ (!(0 <= K:1614) \/ s':1616 <= mid_s:1613)
                           /\ ((K:1614 = 0 /\ mid_s:1613 = s':1616
                                  /\ mid_i:1612 = i':1615)
                                 \/ (1 <= K:1614
                                       /\ 0 <= (-1 + -mid_i:1612 + 1)
                                       /\ 0 <= (255 + -mid_s:1613
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1613))))
                                       /\ 0 <= floor((1/256 * mid_s:1613))
                                       /\ 0 <= (mid_s:1613
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1613))))
                                       /\ 0 <= mid_i:1612
                                       /\ 0 <= (-1 + i':1615) /\ 0 <= s':1616
                                       /\ 0 <= (1 + -i':1615)))
                           /\ (0 = K:1614 \/ -mid_s:1613 <= 0)
                           /\ (K:1611 + K:1614) = K:1617 /\ 0 <= K:1617
                           /\ 0 <= i':1615 /\ 1 <= i':1615
                           /\ (!(0 <= K:1618) \/ mid_i:1619 = K:1618)
                           /\ (!(0 <= K:1618)
                                 \/ (-256 * mid_s:1620) <= ((-256 * havoc:0)
                                                              + (-255
                                                                   * K:1618)))
                           /\ ((K:1618 = 0 /\ havoc:0 = mid_s:1620
                                  /\ 0 = mid_i:1619)
                                 \/ (1 <= K:1618
                                       /\ 0 <= (-havoc:0
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= (-1 + -havoc:0)
                                       /\ 0 <= (-1 + 1)
                                       /\ 0 <= floor((-1/256 * havoc:0))
                                       /\ 0 <= (255 + havoc:0
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= -mid_s:1620
                                       /\ 0 <= (-1 + mid_i:1619)
                                       /\ 0 <= (1 + -mid_i:1619)))
                           /\ (0 = K:1618 \/ !(-havoc:0 <= 0))
                           /\ (!(0 <= K:1621)
                                 \/ i':1622 = (mid_i:1619 + K:1621))
                           /\ (!(0 <= K:1621) \/ s':1623 <= mid_s:1620)
                           /\ ((K:1621 = 0 /\ mid_s:1620 = s':1623
                                  /\ mid_i:1619 = i':1622)
                                 \/ (1 <= K:1621
                                       /\ 0 <= (-1 + -mid_i:1619 + 1)
                                       /\ 0 <= (255 + -mid_s:1620
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1620))))
                                       /\ 0 <= floor((1/256 * mid_s:1620))
                                       /\ 0 <= (mid_s:1620
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1620))))
                                       /\ 0 <= mid_i:1619
                                       /\ 0 <= (-1 + i':1622) /\ 0 <= s':1623
                                       /\ 0 <= (1 + -i':1622)))
                           /\ (0 = K:1621 \/ -mid_s:1620 <= 0)
                           /\ (K:1618 + K:1621) = K:1624 /\ 0 <= K:1624
                           /\ 0 <= i':1622 /\ 1 <= i':1622
                           /\ (s':1623 mod 256) <= (s':1616 mod 256)
                           /\ (s':1616 mod 256) <= (s':1623 mod 256)
                           /\ (s':1583 mod 256) = phi_tmp:1591
                           /\ (s':1609 mod 256) = phi_tmp___0:1592
                           /\ (s':1616 mod 256) = phi_tmp___1:1593
                           /\ (s':1623 mod 256) = phi_tmp___2:1594
                           /\ (s':1623 mod 256) = phi_return:1595
                           /\ havoc:15 = phi_param0:1596
                           /\ 0 = phi_param1:1597
                           /\ type_err:1625 = phi_return@pos:1598
                           /\ type_err:1626 = phi_param0@pos:1599
                           /\ type_err:1627 = phi_param1@pos:1600
                           /\ type_err:1628 = phi_return@width:1601
                           /\ type_err:1629 = phi_param0@width:1602
                           /\ type_err:1630 = phi_param1@width:1603))
                    /\ phi_tmp:1591 = phi_tmp:1631
                    /\ phi_tmp___0:1592 = phi_tmp___0:1632
                    /\ phi_tmp___1:1593 = phi_tmp___1:1633
                    /\ phi_tmp___2:1594 = phi_tmp___2:1634
                    /\ phi_return:1595 = phi_return:1635
                    /\ phi_param0:1596 = phi_param0:1636
                    /\ phi_param1:1597 = phi_param1:1637
                    /\ phi_return@pos:1598 = phi_return@pos:1638
                    /\ phi_param0@pos:1599 = phi_param0@pos:1639
                    /\ phi_param1@pos:1600 = phi_param1@pos:1640
                    /\ phi_return@width:1601 = phi_return@width:1641
                    /\ phi_param0@width:1602 = phi_param0@width:1642
                    /\ phi_param1@width:1603 = phi_param1@width:1643)
                   \/ (0 <= havoc:0 /\ 0 <= havoc:15
                         /\ (!(0 <= K:1578) \/ mid_i:1579 = K:1578)
                         /\ (!(0 <= K:1578)
                               \/ (-256 * mid_s:1580) <= ((-256 * havoc:15)
                                                            + (-255 * K:1578)))
                         /\ ((K:1578 = 0 /\ havoc:15 = mid_s:1580
                                /\ 0 = mid_i:1579)
                               \/ (1 <= K:1578
                                     /\ 0 <= (-havoc:15
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= (-1 + -havoc:15)
                                     /\ 0 <= (-1 + 2)
                                     /\ 0 <= floor((-1/256 * havoc:15))
                                     /\ 0 <= (255 + havoc:15
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= -mid_s:1580
                                     /\ 0 <= (-1 + mid_i:1579)
                                     /\ 0 <= (2 + -mid_i:1579)))
                         /\ (0 = K:1578 \/ !(-havoc:15 <= 0))
                         /\ (!(0 <= K:1581)
                               \/ i':1582 = (mid_i:1579 + K:1581))
                         /\ (!(0 <= K:1581) \/ s':1583 <= mid_s:1580)
                         /\ ((K:1581 = 0 /\ mid_s:1580 = s':1583
                                /\ mid_i:1579 = i':1582)
                               \/ (1 <= K:1581 /\ 0 <= (-1 + -mid_i:1579 + 2)
                                     /\ 0 <= (255 + -mid_s:1580
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:1580))))
                                     /\ 0 <= floor((1/256 * mid_s:1580))
                                     /\ 0 <= (mid_s:1580
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:1580))))
                                     /\ 0 <= mid_i:1579
                                     /\ 0 <= (-1 + i':1582) /\ 0 <= s':1583
                                     /\ 0 <= (2 + -i':1582)))
                         /\ (0 = K:1581 \/ -mid_s:1580 <= 0)
                         /\ (K:1578 + K:1581) = K:1584 /\ 0 <= K:1584
                         /\ 0 <= i':1582 /\ 2 <= i':1582
                         /\ (!(0 <= K:1604) \/ mid_i:1605 = K:1604)
                         /\ (!(0 <= K:1604)
                               \/ (-256 * mid_s:1606) <= ((-256 * havoc:0)
                                                            + (-255 * K:1604)))
                         /\ ((K:1604 = 0 /\ havoc:0 = mid_s:1606
                                /\ 0 = mid_i:1605)
                               \/ (1 <= K:1604
                                     /\ 0 <= (-havoc:0
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                     /\ 0 <= floor((-1/256 * havoc:0))
                                     /\ 0 <= (255 + havoc:0
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= -mid_s:1606
                                     /\ 0 <= (-1 + mid_i:1605)
                                     /\ 0 <= (2 + -mid_i:1605)))
                         /\ (0 = K:1604 \/ !(-havoc:0 <= 0))
                         /\ (!(0 <= K:1607)
                               \/ i':1608 = (mid_i:1605 + K:1607))
                         /\ (!(0 <= K:1607) \/ s':1609 <= mid_s:1606)
                         /\ ((K:1607 = 0 /\ mid_s:1606 = s':1609
                                /\ mid_i:1605 = i':1608)
                               \/ (1 <= K:1607 /\ 0 <= (-1 + -mid_i:1605 + 2)
                                     /\ 0 <= (255 + -mid_s:1606
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:1606))))
                                     /\ 0 <= floor((1/256 * mid_s:1606))
                                     /\ 0 <= (mid_s:1606
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:1606))))
                                     /\ 0 <= mid_i:1605
                                     /\ 0 <= (-1 + i':1608) /\ 0 <= s':1609
                                     /\ 0 <= (2 + -i':1608)))
                         /\ (0 = K:1607 \/ -mid_s:1606 <= 0)
                         /\ (K:1604 + K:1607) = K:1610 /\ 0 <= K:1610
                         /\ 0 <= i':1608 /\ 2 <= i':1608
                         /\ (s':1609 mod 256) <= (s':1583 mod 256)
                         /\ (s':1583 mod 256) <= (s':1609 mod 256)
                         /\ (s':1583 mod 256) = phi_tmp:1631
                         /\ (s':1609 mod 256) = phi_tmp___0:1632
                         /\ tmp___1:36 = phi_tmp___1:1633
                         /\ tmp___2:35 = phi_tmp___2:1634
                         /\ (s':1609 mod 256) = phi_return:1635
                         /\ havoc:15 = phi_param0:1636 /\ 1 = phi_param1:1637
                         /\ type_err:1644 = phi_return@pos:1638
                         /\ type_err:1645 = phi_param0@pos:1639
                         /\ type_err:1646 = phi_param1@pos:1640
                         /\ type_err:1647 = phi_return@width:1641
                         /\ type_err:1648 = phi_param0@width:1642
                         /\ type_err:1649 = phi_param1@width:1643))
                  /\ phi_tmp:1631 = phi_tmp:1650
                  /\ phi_tmp___0:1632 = phi_tmp___0:1651
                  /\ phi_tmp___1:1633 = phi_tmp___1:1652
                  /\ phi_tmp___2:1634 = phi_tmp___2:1653
                  /\ tmp___3:38 = phi_tmp___3:1654
                  /\ phi_return:1635 = phi_return:1655
                  /\ phi_param0:1636 = phi_param0:1656
                  /\ phi_param1:1637 = phi_param1:1657
                  /\ phi_return@pos:1638 = phi_return@pos:1658
                  /\ phi_param0@pos:1639 = phi_param0@pos:1659
                  /\ phi_param1@pos:1640 = phi_param1@pos:1660
                  /\ phi_return@width:1641 = phi_return@width:1661
                  /\ phi_param0@width:1642 = phi_param0@width:1662
                  /\ phi_param1@width:1643 = phi_param1@width:1663)
                 \/ (0 <= havoc:0 /\ 0 <= havoc:15
                       /\ (!(0 <= K:1578) \/ mid_i:1579 = K:1578)
                       /\ (!(0 <= K:1578)
                             \/ (-256 * mid_s:1580) <= ((-256 * havoc:15)
                                                          + (-255 * K:1578)))
                       /\ ((K:1578 = 0 /\ havoc:15 = mid_s:1580
                              /\ 0 = mid_i:1579)
                             \/ (1 <= K:1578
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:1580
                                   /\ 0 <= (-1 + mid_i:1579)
                                   /\ 0 <= (2 + -mid_i:1579)))
                       /\ (0 = K:1578 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1581) \/ i':1582 = (mid_i:1579 + K:1581))
                       /\ (!(0 <= K:1581) \/ s':1583 <= mid_s:1580)
                       /\ ((K:1581 = 0 /\ mid_s:1580 = s':1583
                              /\ mid_i:1579 = i':1582)
                             \/ (1 <= K:1581 /\ 0 <= (-1 + -mid_i:1579 + 2)
                                   /\ 0 <= (255 + -mid_s:1580
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1580))))
                                   /\ 0 <= floor((1/256 * mid_s:1580))
                                   /\ 0 <= (mid_s:1580
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1580))))
                                   /\ 0 <= mid_i:1579 /\ 0 <= (-1 + i':1582)
                                   /\ 0 <= s':1583 /\ 0 <= (2 + -i':1582)))
                       /\ (0 = K:1581 \/ -mid_s:1580 <= 0)
                       /\ (K:1578 + K:1581) = K:1584 /\ 0 <= K:1584
                       /\ 0 <= i':1582 /\ 2 <= i':1582
                       /\ (!(0 <= K:1604) \/ mid_i:1605 = K:1604)
                       /\ (!(0 <= K:1604)
                             \/ (-256 * mid_s:1606) <= ((-256 * havoc:0)
                                                          + (-255 * K:1604)))
                       /\ ((K:1604 = 0 /\ havoc:0 = mid_s:1606
                              /\ 0 = mid_i:1605)
                             \/ (1 <= K:1604
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:1606
                                   /\ 0 <= (-1 + mid_i:1605)
                                   /\ 0 <= (2 + -mid_i:1605)))
                       /\ (0 = K:1604 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:1607) \/ i':1608 = (mid_i:1605 + K:1607))
                       /\ (!(0 <= K:1607) \/ s':1609 <= mid_s:1606)
                       /\ ((K:1607 = 0 /\ mid_s:1606 = s':1609
                              /\ mid_i:1605 = i':1608)
                             \/ (1 <= K:1607 /\ 0 <= (-1 + -mid_i:1605 + 2)
                                   /\ 0 <= (255 + -mid_s:1606
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1606))))
                                   /\ 0 <= floor((1/256 * mid_s:1606))
                                   /\ 0 <= (mid_s:1606
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1606))))
                                   /\ 0 <= mid_i:1605 /\ 0 <= (-1 + i':1608)
                                   /\ 0 <= s':1609 /\ 0 <= (2 + -i':1608)))
                       /\ (0 = K:1607 \/ -mid_s:1606 <= 0)
                       /\ (K:1604 + K:1607) = K:1610 /\ 0 <= K:1610
                       /\ 0 <= i':1608 /\ 2 <= i':1608
                       /\ (s':1609 mod 256) <= (s':1583 mod 256)
                       /\ (s':1583 mod 256) <= (s':1609 mod 256)
                       /\ (!(0 <= K:1611) \/ mid_i:1612 = K:1611)
                       /\ (!(0 <= K:1611)
                             \/ (-256 * mid_s:1613) <= ((-256 * havoc:15)
                                                          + (-255 * K:1611)))
                       /\ ((K:1611 = 0 /\ havoc:15 = mid_s:1613
                              /\ 0 = mid_i:1612)
                             \/ (1 <= K:1611
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:1613
                                   /\ 0 <= (-1 + mid_i:1612)
                                   /\ 0 <= (1 + -mid_i:1612)))
                       /\ (0 = K:1611 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1614) \/ i':1615 = (mid_i:1612 + K:1614))
                       /\ (!(0 <= K:1614) \/ s':1616 <= mid_s:1613)
                       /\ ((K:1614 = 0 /\ mid_s:1613 = s':1616
                              /\ mid_i:1612 = i':1615)
                             \/ (1 <= K:1614 /\ 0 <= (-1 + -mid_i:1612 + 1)
                                   /\ 0 <= (255 + -mid_s:1613
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1613))))
                                   /\ 0 <= floor((1/256 * mid_s:1613))
                                   /\ 0 <= (mid_s:1613
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1613))))
                                   /\ 0 <= mid_i:1612 /\ 0 <= (-1 + i':1615)
                                   /\ 0 <= s':1616 /\ 0 <= (1 + -i':1615)))
                       /\ (0 = K:1614 \/ -mid_s:1613 <= 0)
                       /\ (K:1611 + K:1614) = K:1617 /\ 0 <= K:1617
                       /\ 0 <= i':1615 /\ 1 <= i':1615
                       /\ (!(0 <= K:1618) \/ mid_i:1619 = K:1618)
                       /\ (!(0 <= K:1618)
                             \/ (-256 * mid_s:1620) <= ((-256 * havoc:0)
                                                          + (-255 * K:1618)))
                       /\ ((K:1618 = 0 /\ havoc:0 = mid_s:1620
                              /\ 0 = mid_i:1619)
                             \/ (1 <= K:1618
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:1620
                                   /\ 0 <= (-1 + mid_i:1619)
                                   /\ 0 <= (1 + -mid_i:1619)))
                       /\ (0 = K:1618 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:1621) \/ i':1622 = (mid_i:1619 + K:1621))
                       /\ (!(0 <= K:1621) \/ s':1623 <= mid_s:1620)
                       /\ ((K:1621 = 0 /\ mid_s:1620 = s':1623
                              /\ mid_i:1619 = i':1622)
                             \/ (1 <= K:1621 /\ 0 <= (-1 + -mid_i:1619 + 1)
                                   /\ 0 <= (255 + -mid_s:1620
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1620))))
                                   /\ 0 <= floor((1/256 * mid_s:1620))
                                   /\ 0 <= (mid_s:1620
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1620))))
                                   /\ 0 <= mid_i:1619 /\ 0 <= (-1 + i':1622)
                                   /\ 0 <= s':1623 /\ 0 <= (1 + -i':1622)))
                       /\ (0 = K:1621 \/ -mid_s:1620 <= 0)
                       /\ (K:1618 + K:1621) = K:1624 /\ 0 <= K:1624
                       /\ 0 <= i':1622 /\ 1 <= i':1622
                       /\ (s':1623 mod 256) <= (s':1616 mod 256)
                       /\ (s':1616 mod 256) <= (s':1623 mod 256)
                       /\ (!(0 <= K:1664) \/ mid_i:1665 = K:1664)
                       /\ (!(0 <= K:1664)
                             \/ (-256 * mid_s:1666) <= ((-256 * havoc:15)
                                                          + (-255 * K:1664)))
                       /\ K:1664 = 0 /\ havoc:15 = mid_s:1666
                       /\ 0 = mid_i:1665 /\ (0 = K:1664 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1667) \/ i':1668 = (mid_i:1665 + K:1667))
                       /\ (!(0 <= K:1667) \/ s':1669 <= mid_s:1666)
                       /\ ((K:1667 = 0 /\ mid_s:1666 = s':1669
                              /\ mid_i:1665 = i':1668)
                             \/ (1 <= K:1667 /\ 0 <= (-1 + -mid_i:1665)
                                   /\ 0 <= (255 + -mid_s:1666
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1666))))
                                   /\ 0 <= floor((1/256 * mid_s:1666))
                                   /\ 0 <= (mid_s:1666
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1666))))
                                   /\ 0 <= mid_i:1665 /\ 0 <= (-1 + i':1668)
                                   /\ 0 <= s':1669 /\ 0 <= -i':1668))
                       /\ (0 = K:1667 \/ -mid_s:1666 <= 0)
                       /\ (K:1664 + K:1667) = K:1670 /\ 0 <= K:1670
                       /\ 0 <= i':1668 /\ 0 <= i':1668
                       /\ (s':1583 mod 256) = phi_tmp:1650
                       /\ (s':1609 mod 256) = phi_tmp___0:1651
                       /\ (s':1616 mod 256) = phi_tmp___1:1652
                       /\ (s':1623 mod 256) = phi_tmp___2:1653
                       /\ (s':1669 mod 256) = phi_tmp___3:1654
                       /\ (s':1669 mod 256) = phi_return:1655
                       /\ havoc:0 = phi_param0:1656 /\ 0 = phi_param1:1657
                       /\ type_err:1671 = phi_return@pos:1658
                       /\ type_err:1672 = phi_param0@pos:1659
                       /\ type_err:1673 = phi_param1@pos:1660
                       /\ type_err:1674 = phi_return@width:1661
                       /\ type_err:1675 = phi_param0@width:1662
                       /\ type_err:1676 = phi_param1@width:1663))
                /\ phi_tmp:1650 = phi_tmp:1677
                /\ phi_tmp___0:1651 = phi_tmp___0:1678
                /\ phi_tmp___1:1652 = phi_tmp___1:1679
                /\ phi_tmp___2:1653 = phi_tmp___2:1680
                /\ phi_tmp___3:1654 = phi_tmp___3:1681
                /\ phi_return:1655 = phi_return:1682
                /\ phi_param0:1656 = phi_param0:1683
                /\ phi_param1:1657 = phi_param1:1684
                /\ phi_return@pos:1658 = phi_return@pos:1685
                /\ phi_param0@pos:1659 = phi_param0@pos:1686
                /\ phi_param1@pos:1660 = phi_param1@pos:1687
                /\ phi_return@width:1661 = phi_return@width:1688
                /\ phi_param0@width:1662 = phi_param0@width:1689
                /\ phi_param1@width:1663 = phi_param1@width:1690)
               \/ (0 <= havoc:0 /\ 0 <= havoc:15
                     /\ (!(0 <= K:1578) \/ mid_i:1579 = K:1578)
                     /\ (!(0 <= K:1578)
                           \/ (-256 * mid_s:1580) <= ((-256 * havoc:15)
                                                        + (-255 * K:1578)))
                     /\ ((K:1578 = 0 /\ havoc:15 = mid_s:1580
                            /\ 0 = mid_i:1579)
                           \/ (1 <= K:1578
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:1580
                                 /\ 0 <= (-1 + mid_i:1579)
                                 /\ 0 <= (2 + -mid_i:1579)))
                     /\ (0 = K:1578 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:1581) \/ i':1582 = (mid_i:1579 + K:1581))
                     /\ (!(0 <= K:1581) \/ s':1583 <= mid_s:1580)
                     /\ ((K:1581 = 0 /\ mid_s:1580 = s':1583
                            /\ mid_i:1579 = i':1582)
                           \/ (1 <= K:1581 /\ 0 <= (-1 + -mid_i:1579 + 2)
                                 /\ 0 <= (255 + -mid_s:1580
                                            + (256
                                                 * floor((1/256 * mid_s:1580))))
                                 /\ 0 <= floor((1/256 * mid_s:1580))
                                 /\ 0 <= (mid_s:1580
                                            + (-256
                                                 * floor((1/256 * mid_s:1580))))
                                 /\ 0 <= mid_i:1579 /\ 0 <= (-1 + i':1582)
                                 /\ 0 <= s':1583 /\ 0 <= (2 + -i':1582)))
                     /\ (0 = K:1581 \/ -mid_s:1580 <= 0)
                     /\ (K:1578 + K:1581) = K:1584 /\ 0 <= K:1584
                     /\ 0 <= i':1582 /\ 2 <= i':1582
                     /\ (!(0 <= K:1604) \/ mid_i:1605 = K:1604)
                     /\ (!(0 <= K:1604)
                           \/ (-256 * mid_s:1606) <= ((-256 * havoc:0)
                                                        + (-255 * K:1604)))
                     /\ ((K:1604 = 0 /\ havoc:0 = mid_s:1606
                            /\ 0 = mid_i:1605)
                           \/ (1 <= K:1604
                                 /\ 0 <= (-havoc:0
                                            + (-256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:0))
                                 /\ 0 <= (255 + havoc:0
                                            + (256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= -mid_s:1606
                                 /\ 0 <= (-1 + mid_i:1605)
                                 /\ 0 <= (2 + -mid_i:1605)))
                     /\ (0 = K:1604 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:1607) \/ i':1608 = (mid_i:1605 + K:1607))
                     /\ (!(0 <= K:1607) \/ s':1609 <= mid_s:1606)
                     /\ ((K:1607 = 0 /\ mid_s:1606 = s':1609
                            /\ mid_i:1605 = i':1608)
                           \/ (1 <= K:1607 /\ 0 <= (-1 + -mid_i:1605 + 2)
                                 /\ 0 <= (255 + -mid_s:1606
                                            + (256
                                                 * floor((1/256 * mid_s:1606))))
                                 /\ 0 <= floor((1/256 * mid_s:1606))
                                 /\ 0 <= (mid_s:1606
                                            + (-256
                                                 * floor((1/256 * mid_s:1606))))
                                 /\ 0 <= mid_i:1605 /\ 0 <= (-1 + i':1608)
                                 /\ 0 <= s':1609 /\ 0 <= (2 + -i':1608)))
                     /\ (0 = K:1607 \/ -mid_s:1606 <= 0)
                     /\ (K:1604 + K:1607) = K:1610 /\ 0 <= K:1610
                     /\ 0 <= i':1608 /\ 2 <= i':1608
                     /\ (s':1609 mod 256) <= (s':1583 mod 256)
                     /\ (s':1583 mod 256) <= (s':1609 mod 256)
                     /\ (!(0 <= K:1611) \/ mid_i:1612 = K:1611)
                     /\ (!(0 <= K:1611)
                           \/ (-256 * mid_s:1613) <= ((-256 * havoc:15)
                                                        + (-255 * K:1611)))
                     /\ ((K:1611 = 0 /\ havoc:15 = mid_s:1613
                            /\ 0 = mid_i:1612)
                           \/ (1 <= K:1611
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:1613
                                 /\ 0 <= (-1 + mid_i:1612)
                                 /\ 0 <= (1 + -mid_i:1612)))
                     /\ (0 = K:1611 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:1614) \/ i':1615 = (mid_i:1612 + K:1614))
                     /\ (!(0 <= K:1614) \/ s':1616 <= mid_s:1613)
                     /\ ((K:1614 = 0 /\ mid_s:1613 = s':1616
                            /\ mid_i:1612 = i':1615)
                           \/ (1 <= K:1614 /\ 0 <= (-1 + -mid_i:1612 + 1)
                                 /\ 0 <= (255 + -mid_s:1613
                                            + (256
                                                 * floor((1/256 * mid_s:1613))))
                                 /\ 0 <= floor((1/256 * mid_s:1613))
                                 /\ 0 <= (mid_s:1613
                                            + (-256
                                                 * floor((1/256 * mid_s:1613))))
                                 /\ 0 <= mid_i:1612 /\ 0 <= (-1 + i':1615)
                                 /\ 0 <= s':1616 /\ 0 <= (1 + -i':1615)))
                     /\ (0 = K:1614 \/ -mid_s:1613 <= 0)
                     /\ (K:1611 + K:1614) = K:1617 /\ 0 <= K:1617
                     /\ 0 <= i':1615 /\ 1 <= i':1615
                     /\ (s':1583 mod 256) = phi_tmp:1677
                     /\ (s':1609 mod 256) = phi_tmp___0:1678
                     /\ (s':1616 mod 256) = phi_tmp___1:1679
                     /\ tmp___2:35 = phi_tmp___2:1680
                     /\ tmp___3:38 = phi_tmp___3:1681
                     /\ (s':1616 mod 256) = phi_return:1682
                     /\ havoc:0 = phi_param0:1683 /\ 1 = phi_param1:1684
                     /\ type_err:1691 = phi_return@pos:1685
                     /\ type_err:1692 = phi_param0@pos:1686
                     /\ type_err:1693 = phi_param1@pos:1687
                     /\ type_err:1694 = phi_return@width:1688
                     /\ type_err:1695 = phi_param0@width:1689
                     /\ type_err:1696 = phi_param1@width:1690)))}
    ( __pstate , (Unique State Name,72)_g1 , __done )	Base relation: 
{password_binval := havoc:15
 guess_binval := havoc:0
 tmp := phi_tmp:1809
 tmp___0 := phi_tmp___0:1810
 tmp___1 := phi_tmp___1:1811
 tmp___2 := phi_tmp___2:1812
 tmp___3 := phi_tmp___3:1813
 return := phi_return:1814
 param0 := phi_param0:1815
 param1 := phi_param1:1816
 return@pos := phi_return@pos:1817
 param0@pos := type_err:1829
 param1@pos := type_err:1830
 return@width := phi_return@width:1820
 param0@width := type_err:1831
 param1@width := type_err:1832
 when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
         /\ havoc:15 < 16777216
         /\ ((((((((((0 <= havoc:0 /\ 0 <= havoc:15 /\ tmp:34 = phi_tmp:1697
                        /\ return:14 = phi_return:1698
                        /\ havoc:15 = phi_param0:1699
                        /\ return@pos:13 = phi_return@pos:1700
                        /\ type_err:1701 = phi_param0@pos:1702
                        /\ type_err:1703 = phi_param1@pos:1704
                        /\ return@width:12 = phi_return@width:1705
                        /\ type_err:1706 = phi_param0@width:1707
                        /\ type_err:1708 = phi_param1@width:1709)
                       \/ (0 <= havoc:0 /\ 0 <= havoc:15
                             /\ (!(0 <= K:1710) \/ mid_i:1711 = K:1710)
                             /\ (!(0 <= K:1710)
                                   \/ (-256 * mid_s:1712) <= ((-256
                                                                 * havoc:15)
                                                                + (-255
                                                                    * K:1710)))
                             /\ ((K:1710 = 0 /\ havoc:15 = mid_s:1712
                                    /\ 0 = mid_i:1711)
                                   \/ (1 <= K:1710
                                         /\ 0 <= (-havoc:15
                                                    + (-256
                                                         * floor((-1/256
                                                                    * havoc:15))))
                                         /\ 0 <= (-1 + -havoc:15)
                                         /\ 0 <= (-1 + 2)
                                         /\ 0 <= floor((-1/256 * havoc:15))
                                         /\ 0 <= (255 + havoc:15
                                                    + (256
                                                         * floor((-1/256
                                                                    * havoc:15))))
                                         /\ 0 <= -mid_s:1712
                                         /\ 0 <= (-1 + mid_i:1711)
                                         /\ 0 <= (2 + -mid_i:1711)))
                             /\ (0 = K:1710 \/ !(-havoc:15 <= 0))
                             /\ (!(0 <= K:1713)
                                   \/ i':1714 = (mid_i:1711 + K:1713))
                             /\ (!(0 <= K:1713) \/ s':1715 <= mid_s:1712)
                             /\ ((K:1713 = 0 /\ mid_s:1712 = s':1715
                                    /\ mid_i:1711 = i':1714)
                                   \/ (1 <= K:1713
                                         /\ 0 <= (-1 + -mid_i:1711 + 2)
                                         /\ 0 <= (255 + -mid_s:1712
                                                    + (256
                                                         * floor((1/256
                                                                    * mid_s:1712))))
                                         /\ 0 <= floor((1/256 * mid_s:1712))
                                         /\ 0 <= (mid_s:1712
                                                    + (-256
                                                         * floor((1/256
                                                                    * mid_s:1712))))
                                         /\ 0 <= mid_i:1711
                                         /\ 0 <= (-1 + i':1714)
                                         /\ 0 <= s':1715
                                         /\ 0 <= (2 + -i':1714)))
                             /\ (0 = K:1713 \/ -mid_s:1712 <= 0)
                             /\ (K:1710 + K:1713) = K:1716 /\ 0 <= K:1716
                             /\ 0 <= i':1714 /\ 2 <= i':1714
                             /\ (s':1715 mod 256) = phi_tmp:1697
                             /\ (s':1715 mod 256) = phi_return:1698
                             /\ havoc:0 = phi_param0:1699
                             /\ type_err:1717 = phi_return@pos:1700
                             /\ type_err:1718 = phi_param0@pos:1702
                             /\ type_err:1719 = phi_param1@pos:1704
                             /\ type_err:1720 = phi_return@width:1705
                             /\ type_err:1721 = phi_param0@width:1707
                             /\ type_err:1722 = phi_param1@width:1709))
                      /\ phi_tmp:1697 = phi_tmp:1723
                      /\ tmp___0:33 = phi_tmp___0:1724
                      /\ tmp___1:36 = phi_tmp___1:1725
                      /\ tmp___2:35 = phi_tmp___2:1726
                      /\ phi_return:1698 = phi_return:1727
                      /\ phi_param0:1699 = phi_param0:1728
                      /\ 2 = phi_param1:1729
                      /\ phi_return@pos:1700 = phi_return@pos:1730
                      /\ phi_param0@pos:1702 = phi_param0@pos:1731
                      /\ phi_param1@pos:1704 = phi_param1@pos:1732
                      /\ phi_return@width:1705 = phi_return@width:1733
                      /\ phi_param0@width:1707 = phi_param0@width:1734
                      /\ phi_param1@width:1709 = phi_param1@width:1735)
                     \/ (0 <= havoc:0 /\ 0 <= havoc:15
                           /\ (!(0 <= K:1710) \/ mid_i:1711 = K:1710)
                           /\ (!(0 <= K:1710)
                                 \/ (-256 * mid_s:1712) <= ((-256 * havoc:15)
                                                              + (-255
                                                                   * K:1710)))
                           /\ ((K:1710 = 0 /\ havoc:15 = mid_s:1712
                                  /\ 0 = mid_i:1711)
                                 \/ (1 <= K:1710
                                       /\ 0 <= (-havoc:15
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= (-1 + -havoc:15)
                                       /\ 0 <= (-1 + 2)
                                       /\ 0 <= floor((-1/256 * havoc:15))
                                       /\ 0 <= (255 + havoc:15
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= -mid_s:1712
                                       /\ 0 <= (-1 + mid_i:1711)
                                       /\ 0 <= (2 + -mid_i:1711)))
                           /\ (0 = K:1710 \/ !(-havoc:15 <= 0))
                           /\ (!(0 <= K:1713)
                                 \/ i':1714 = (mid_i:1711 + K:1713))
                           /\ (!(0 <= K:1713) \/ s':1715 <= mid_s:1712)
                           /\ ((K:1713 = 0 /\ mid_s:1712 = s':1715
                                  /\ mid_i:1711 = i':1714)
                                 \/ (1 <= K:1713
                                       /\ 0 <= (-1 + -mid_i:1711 + 2)
                                       /\ 0 <= (255 + -mid_s:1712
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1712))))
                                       /\ 0 <= floor((1/256 * mid_s:1712))
                                       /\ 0 <= (mid_s:1712
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1712))))
                                       /\ 0 <= mid_i:1711
                                       /\ 0 <= (-1 + i':1714) /\ 0 <= s':1715
                                       /\ 0 <= (2 + -i':1714)))
                           /\ (0 = K:1713 \/ -mid_s:1712 <= 0)
                           /\ (K:1710 + K:1713) = K:1716 /\ 0 <= K:1716
                           /\ 0 <= i':1714 /\ 2 <= i':1714
                           /\ (!(0 <= K:1736) \/ mid_i:1737 = K:1736)
                           /\ (!(0 <= K:1736)
                                 \/ (-256 * mid_s:1738) <= ((-256 * havoc:0)
                                                              + (-255
                                                                   * K:1736)))
                           /\ ((K:1736 = 0 /\ havoc:0 = mid_s:1738
                                  /\ 0 = mid_i:1737)
                                 \/ (1 <= K:1736
                                       /\ 0 <= (-havoc:0
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= (-1 + -havoc:0)
                                       /\ 0 <= (-1 + 2)
                                       /\ 0 <= floor((-1/256 * havoc:0))
                                       /\ 0 <= (255 + havoc:0
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= -mid_s:1738
                                       /\ 0 <= (-1 + mid_i:1737)
                                       /\ 0 <= (2 + -mid_i:1737)))
                           /\ (0 = K:1736 \/ !(-havoc:0 <= 0))
                           /\ (!(0 <= K:1739)
                                 \/ i':1740 = (mid_i:1737 + K:1739))
                           /\ (!(0 <= K:1739) \/ s':1741 <= mid_s:1738)
                           /\ ((K:1739 = 0 /\ mid_s:1738 = s':1741
                                  /\ mid_i:1737 = i':1740)
                                 \/ (1 <= K:1739
                                       /\ 0 <= (-1 + -mid_i:1737 + 2)
                                       /\ 0 <= (255 + -mid_s:1738
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1738))))
                                       /\ 0 <= floor((1/256 * mid_s:1738))
                                       /\ 0 <= (mid_s:1738
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1738))))
                                       /\ 0 <= mid_i:1737
                                       /\ 0 <= (-1 + i':1740) /\ 0 <= s':1741
                                       /\ 0 <= (2 + -i':1740)))
                           /\ (0 = K:1739 \/ -mid_s:1738 <= 0)
                           /\ (K:1736 + K:1739) = K:1742 /\ 0 <= K:1742
                           /\ 0 <= i':1740 /\ 2 <= i':1740
                           /\ (s':1741 mod 256) <= (s':1715 mod 256)
                           /\ (s':1715 mod 256) <= (s':1741 mod 256)
                           /\ (!(0 <= K:1743) \/ mid_i:1744 = K:1743)
                           /\ (!(0 <= K:1743)
                                 \/ (-256 * mid_s:1745) <= ((-256 * havoc:15)
                                                              + (-255
                                                                   * K:1743)))
                           /\ ((K:1743 = 0 /\ havoc:15 = mid_s:1745
                                  /\ 0 = mid_i:1744)
                                 \/ (1 <= K:1743
                                       /\ 0 <= (-havoc:15
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= (-1 + -havoc:15)
                                       /\ 0 <= (-1 + 1)
                                       /\ 0 <= floor((-1/256 * havoc:15))
                                       /\ 0 <= (255 + havoc:15
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:15))))
                                       /\ 0 <= -mid_s:1745
                                       /\ 0 <= (-1 + mid_i:1744)
                                       /\ 0 <= (1 + -mid_i:1744)))
                           /\ (0 = K:1743 \/ !(-havoc:15 <= 0))
                           /\ (!(0 <= K:1746)
                                 \/ i':1747 = (mid_i:1744 + K:1746))
                           /\ (!(0 <= K:1746) \/ s':1748 <= mid_s:1745)
                           /\ ((K:1746 = 0 /\ mid_s:1745 = s':1748
                                  /\ mid_i:1744 = i':1747)
                                 \/ (1 <= K:1746
                                       /\ 0 <= (-1 + -mid_i:1744 + 1)
                                       /\ 0 <= (255 + -mid_s:1745
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1745))))
                                       /\ 0 <= floor((1/256 * mid_s:1745))
                                       /\ 0 <= (mid_s:1745
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1745))))
                                       /\ 0 <= mid_i:1744
                                       /\ 0 <= (-1 + i':1747) /\ 0 <= s':1748
                                       /\ 0 <= (1 + -i':1747)))
                           /\ (0 = K:1746 \/ -mid_s:1745 <= 0)
                           /\ (K:1743 + K:1746) = K:1749 /\ 0 <= K:1749
                           /\ 0 <= i':1747 /\ 1 <= i':1747
                           /\ (!(0 <= K:1750) \/ mid_i:1751 = K:1750)
                           /\ (!(0 <= K:1750)
                                 \/ (-256 * mid_s:1752) <= ((-256 * havoc:0)
                                                              + (-255
                                                                   * K:1750)))
                           /\ ((K:1750 = 0 /\ havoc:0 = mid_s:1752
                                  /\ 0 = mid_i:1751)
                                 \/ (1 <= K:1750
                                       /\ 0 <= (-havoc:0
                                                  + (-256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= (-1 + -havoc:0)
                                       /\ 0 <= (-1 + 1)
                                       /\ 0 <= floor((-1/256 * havoc:0))
                                       /\ 0 <= (255 + havoc:0
                                                  + (256
                                                       * floor((-1/256
                                                                  * havoc:0))))
                                       /\ 0 <= -mid_s:1752
                                       /\ 0 <= (-1 + mid_i:1751)
                                       /\ 0 <= (1 + -mid_i:1751)))
                           /\ (0 = K:1750 \/ !(-havoc:0 <= 0))
                           /\ (!(0 <= K:1753)
                                 \/ i':1754 = (mid_i:1751 + K:1753))
                           /\ (!(0 <= K:1753) \/ s':1755 <= mid_s:1752)
                           /\ ((K:1753 = 0 /\ mid_s:1752 = s':1755
                                  /\ mid_i:1751 = i':1754)
                                 \/ (1 <= K:1753
                                       /\ 0 <= (-1 + -mid_i:1751 + 1)
                                       /\ 0 <= (255 + -mid_s:1752
                                                  + (256
                                                       * floor((1/256
                                                                  * mid_s:1752))))
                                       /\ 0 <= floor((1/256 * mid_s:1752))
                                       /\ 0 <= (mid_s:1752
                                                  + (-256
                                                       * floor((1/256
                                                                  * mid_s:1752))))
                                       /\ 0 <= mid_i:1751
                                       /\ 0 <= (-1 + i':1754) /\ 0 <= s':1755
                                       /\ 0 <= (1 + -i':1754)))
                           /\ (0 = K:1753 \/ -mid_s:1752 <= 0)
                           /\ (K:1750 + K:1753) = K:1756 /\ 0 <= K:1756
                           /\ 0 <= i':1754 /\ 1 <= i':1754
                           /\ (s':1755 mod 256) <= (s':1748 mod 256)
                           /\ (s':1748 mod 256) <= (s':1755 mod 256)
                           /\ (s':1715 mod 256) = phi_tmp:1723
                           /\ (s':1741 mod 256) = phi_tmp___0:1724
                           /\ (s':1748 mod 256) = phi_tmp___1:1725
                           /\ (s':1755 mod 256) = phi_tmp___2:1726
                           /\ (s':1755 mod 256) = phi_return:1727
                           /\ havoc:15 = phi_param0:1728
                           /\ 0 = phi_param1:1729
                           /\ type_err:1757 = phi_return@pos:1730
                           /\ type_err:1758 = phi_param0@pos:1731
                           /\ type_err:1759 = phi_param1@pos:1732
                           /\ type_err:1760 = phi_return@width:1733
                           /\ type_err:1761 = phi_param0@width:1734
                           /\ type_err:1762 = phi_param1@width:1735))
                    /\ phi_tmp:1723 = phi_tmp:1763
                    /\ phi_tmp___0:1724 = phi_tmp___0:1764
                    /\ phi_tmp___1:1725 = phi_tmp___1:1765
                    /\ phi_tmp___2:1726 = phi_tmp___2:1766
                    /\ phi_return:1727 = phi_return:1767
                    /\ phi_param0:1728 = phi_param0:1768
                    /\ phi_param1:1729 = phi_param1:1769
                    /\ phi_return@pos:1730 = phi_return@pos:1770
                    /\ phi_param0@pos:1731 = phi_param0@pos:1771
                    /\ phi_param1@pos:1732 = phi_param1@pos:1772
                    /\ phi_return@width:1733 = phi_return@width:1773
                    /\ phi_param0@width:1734 = phi_param0@width:1774
                    /\ phi_param1@width:1735 = phi_param1@width:1775)
                   \/ (0 <= havoc:0 /\ 0 <= havoc:15
                         /\ (!(0 <= K:1710) \/ mid_i:1711 = K:1710)
                         /\ (!(0 <= K:1710)
                               \/ (-256 * mid_s:1712) <= ((-256 * havoc:15)
                                                            + (-255 * K:1710)))
                         /\ ((K:1710 = 0 /\ havoc:15 = mid_s:1712
                                /\ 0 = mid_i:1711)
                               \/ (1 <= K:1710
                                     /\ 0 <= (-havoc:15
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= (-1 + -havoc:15)
                                     /\ 0 <= (-1 + 2)
                                     /\ 0 <= floor((-1/256 * havoc:15))
                                     /\ 0 <= (255 + havoc:15
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:15))))
                                     /\ 0 <= -mid_s:1712
                                     /\ 0 <= (-1 + mid_i:1711)
                                     /\ 0 <= (2 + -mid_i:1711)))
                         /\ (0 = K:1710 \/ !(-havoc:15 <= 0))
                         /\ (!(0 <= K:1713)
                               \/ i':1714 = (mid_i:1711 + K:1713))
                         /\ (!(0 <= K:1713) \/ s':1715 <= mid_s:1712)
                         /\ ((K:1713 = 0 /\ mid_s:1712 = s':1715
                                /\ mid_i:1711 = i':1714)
                               \/ (1 <= K:1713 /\ 0 <= (-1 + -mid_i:1711 + 2)
                                     /\ 0 <= (255 + -mid_s:1712
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:1712))))
                                     /\ 0 <= floor((1/256 * mid_s:1712))
                                     /\ 0 <= (mid_s:1712
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:1712))))
                                     /\ 0 <= mid_i:1711
                                     /\ 0 <= (-1 + i':1714) /\ 0 <= s':1715
                                     /\ 0 <= (2 + -i':1714)))
                         /\ (0 = K:1713 \/ -mid_s:1712 <= 0)
                         /\ (K:1710 + K:1713) = K:1716 /\ 0 <= K:1716
                         /\ 0 <= i':1714 /\ 2 <= i':1714
                         /\ (!(0 <= K:1736) \/ mid_i:1737 = K:1736)
                         /\ (!(0 <= K:1736)
                               \/ (-256 * mid_s:1738) <= ((-256 * havoc:0)
                                                            + (-255 * K:1736)))
                         /\ ((K:1736 = 0 /\ havoc:0 = mid_s:1738
                                /\ 0 = mid_i:1737)
                               \/ (1 <= K:1736
                                     /\ 0 <= (-havoc:0
                                                + (-256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                     /\ 0 <= floor((-1/256 * havoc:0))
                                     /\ 0 <= (255 + havoc:0
                                                + (256
                                                     * floor((-1/256
                                                                * havoc:0))))
                                     /\ 0 <= -mid_s:1738
                                     /\ 0 <= (-1 + mid_i:1737)
                                     /\ 0 <= (2 + -mid_i:1737)))
                         /\ (0 = K:1736 \/ !(-havoc:0 <= 0))
                         /\ (!(0 <= K:1739)
                               \/ i':1740 = (mid_i:1737 + K:1739))
                         /\ (!(0 <= K:1739) \/ s':1741 <= mid_s:1738)
                         /\ ((K:1739 = 0 /\ mid_s:1738 = s':1741
                                /\ mid_i:1737 = i':1740)
                               \/ (1 <= K:1739 /\ 0 <= (-1 + -mid_i:1737 + 2)
                                     /\ 0 <= (255 + -mid_s:1738
                                                + (256
                                                     * floor((1/256
                                                                * mid_s:1738))))
                                     /\ 0 <= floor((1/256 * mid_s:1738))
                                     /\ 0 <= (mid_s:1738
                                                + (-256
                                                     * floor((1/256
                                                                * mid_s:1738))))
                                     /\ 0 <= mid_i:1737
                                     /\ 0 <= (-1 + i':1740) /\ 0 <= s':1741
                                     /\ 0 <= (2 + -i':1740)))
                         /\ (0 = K:1739 \/ -mid_s:1738 <= 0)
                         /\ (K:1736 + K:1739) = K:1742 /\ 0 <= K:1742
                         /\ 0 <= i':1740 /\ 2 <= i':1740
                         /\ (s':1741 mod 256) <= (s':1715 mod 256)
                         /\ (s':1715 mod 256) <= (s':1741 mod 256)
                         /\ (s':1715 mod 256) = phi_tmp:1763
                         /\ (s':1741 mod 256) = phi_tmp___0:1764
                         /\ tmp___1:36 = phi_tmp___1:1765
                         /\ tmp___2:35 = phi_tmp___2:1766
                         /\ (s':1741 mod 256) = phi_return:1767
                         /\ havoc:15 = phi_param0:1768 /\ 1 = phi_param1:1769
                         /\ type_err:1776 = phi_return@pos:1770
                         /\ type_err:1777 = phi_param0@pos:1771
                         /\ type_err:1778 = phi_param1@pos:1772
                         /\ type_err:1779 = phi_return@width:1773
                         /\ type_err:1780 = phi_param0@width:1774
                         /\ type_err:1781 = phi_param1@width:1775))
                  /\ phi_tmp:1763 = phi_tmp:1782
                  /\ phi_tmp___0:1764 = phi_tmp___0:1783
                  /\ phi_tmp___1:1765 = phi_tmp___1:1784
                  /\ phi_tmp___2:1766 = phi_tmp___2:1785
                  /\ tmp___3:38 = phi_tmp___3:1786
                  /\ phi_return:1767 = phi_return:1787
                  /\ phi_param0:1768 = phi_param0:1788
                  /\ phi_param1:1769 = phi_param1:1789
                  /\ phi_return@pos:1770 = phi_return@pos:1790
                  /\ phi_param0@pos:1771 = phi_param0@pos:1791
                  /\ phi_param1@pos:1772 = phi_param1@pos:1792
                  /\ phi_return@width:1773 = phi_return@width:1793
                  /\ phi_param0@width:1774 = phi_param0@width:1794
                  /\ phi_param1@width:1775 = phi_param1@width:1795)
                 \/ (0 <= havoc:0 /\ 0 <= havoc:15
                       /\ (!(0 <= K:1710) \/ mid_i:1711 = K:1710)
                       /\ (!(0 <= K:1710)
                             \/ (-256 * mid_s:1712) <= ((-256 * havoc:15)
                                                          + (-255 * K:1710)))
                       /\ ((K:1710 = 0 /\ havoc:15 = mid_s:1712
                              /\ 0 = mid_i:1711)
                             \/ (1 <= K:1710
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:1712
                                   /\ 0 <= (-1 + mid_i:1711)
                                   /\ 0 <= (2 + -mid_i:1711)))
                       /\ (0 = K:1710 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1713) \/ i':1714 = (mid_i:1711 + K:1713))
                       /\ (!(0 <= K:1713) \/ s':1715 <= mid_s:1712)
                       /\ ((K:1713 = 0 /\ mid_s:1712 = s':1715
                              /\ mid_i:1711 = i':1714)
                             \/ (1 <= K:1713 /\ 0 <= (-1 + -mid_i:1711 + 2)
                                   /\ 0 <= (255 + -mid_s:1712
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1712))))
                                   /\ 0 <= floor((1/256 * mid_s:1712))
                                   /\ 0 <= (mid_s:1712
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1712))))
                                   /\ 0 <= mid_i:1711 /\ 0 <= (-1 + i':1714)
                                   /\ 0 <= s':1715 /\ 0 <= (2 + -i':1714)))
                       /\ (0 = K:1713 \/ -mid_s:1712 <= 0)
                       /\ (K:1710 + K:1713) = K:1716 /\ 0 <= K:1716
                       /\ 0 <= i':1714 /\ 2 <= i':1714
                       /\ (!(0 <= K:1736) \/ mid_i:1737 = K:1736)
                       /\ (!(0 <= K:1736)
                             \/ (-256 * mid_s:1738) <= ((-256 * havoc:0)
                                                          + (-255 * K:1736)))
                       /\ ((K:1736 = 0 /\ havoc:0 = mid_s:1738
                              /\ 0 = mid_i:1737)
                             \/ (1 <= K:1736
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:1738
                                   /\ 0 <= (-1 + mid_i:1737)
                                   /\ 0 <= (2 + -mid_i:1737)))
                       /\ (0 = K:1736 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:1739) \/ i':1740 = (mid_i:1737 + K:1739))
                       /\ (!(0 <= K:1739) \/ s':1741 <= mid_s:1738)
                       /\ ((K:1739 = 0 /\ mid_s:1738 = s':1741
                              /\ mid_i:1737 = i':1740)
                             \/ (1 <= K:1739 /\ 0 <= (-1 + -mid_i:1737 + 2)
                                   /\ 0 <= (255 + -mid_s:1738
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1738))))
                                   /\ 0 <= floor((1/256 * mid_s:1738))
                                   /\ 0 <= (mid_s:1738
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1738))))
                                   /\ 0 <= mid_i:1737 /\ 0 <= (-1 + i':1740)
                                   /\ 0 <= s':1741 /\ 0 <= (2 + -i':1740)))
                       /\ (0 = K:1739 \/ -mid_s:1738 <= 0)
                       /\ (K:1736 + K:1739) = K:1742 /\ 0 <= K:1742
                       /\ 0 <= i':1740 /\ 2 <= i':1740
                       /\ (s':1741 mod 256) <= (s':1715 mod 256)
                       /\ (s':1715 mod 256) <= (s':1741 mod 256)
                       /\ (!(0 <= K:1743) \/ mid_i:1744 = K:1743)
                       /\ (!(0 <= K:1743)
                             \/ (-256 * mid_s:1745) <= ((-256 * havoc:15)
                                                          + (-255 * K:1743)))
                       /\ ((K:1743 = 0 /\ havoc:15 = mid_s:1745
                              /\ 0 = mid_i:1744)
                             \/ (1 <= K:1743
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:1745
                                   /\ 0 <= (-1 + mid_i:1744)
                                   /\ 0 <= (1 + -mid_i:1744)))
                       /\ (0 = K:1743 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1746) \/ i':1747 = (mid_i:1744 + K:1746))
                       /\ (!(0 <= K:1746) \/ s':1748 <= mid_s:1745)
                       /\ ((K:1746 = 0 /\ mid_s:1745 = s':1748
                              /\ mid_i:1744 = i':1747)
                             \/ (1 <= K:1746 /\ 0 <= (-1 + -mid_i:1744 + 1)
                                   /\ 0 <= (255 + -mid_s:1745
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1745))))
                                   /\ 0 <= floor((1/256 * mid_s:1745))
                                   /\ 0 <= (mid_s:1745
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1745))))
                                   /\ 0 <= mid_i:1744 /\ 0 <= (-1 + i':1747)
                                   /\ 0 <= s':1748 /\ 0 <= (1 + -i':1747)))
                       /\ (0 = K:1746 \/ -mid_s:1745 <= 0)
                       /\ (K:1743 + K:1746) = K:1749 /\ 0 <= K:1749
                       /\ 0 <= i':1747 /\ 1 <= i':1747
                       /\ (!(0 <= K:1750) \/ mid_i:1751 = K:1750)
                       /\ (!(0 <= K:1750)
                             \/ (-256 * mid_s:1752) <= ((-256 * havoc:0)
                                                          + (-255 * K:1750)))
                       /\ ((K:1750 = 0 /\ havoc:0 = mid_s:1752
                              /\ 0 = mid_i:1751)
                             \/ (1 <= K:1750
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:1752
                                   /\ 0 <= (-1 + mid_i:1751)
                                   /\ 0 <= (1 + -mid_i:1751)))
                       /\ (0 = K:1750 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:1753) \/ i':1754 = (mid_i:1751 + K:1753))
                       /\ (!(0 <= K:1753) \/ s':1755 <= mid_s:1752)
                       /\ ((K:1753 = 0 /\ mid_s:1752 = s':1755
                              /\ mid_i:1751 = i':1754)
                             \/ (1 <= K:1753 /\ 0 <= (-1 + -mid_i:1751 + 1)
                                   /\ 0 <= (255 + -mid_s:1752
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1752))))
                                   /\ 0 <= floor((1/256 * mid_s:1752))
                                   /\ 0 <= (mid_s:1752
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1752))))
                                   /\ 0 <= mid_i:1751 /\ 0 <= (-1 + i':1754)
                                   /\ 0 <= s':1755 /\ 0 <= (1 + -i':1754)))
                       /\ (0 = K:1753 \/ -mid_s:1752 <= 0)
                       /\ (K:1750 + K:1753) = K:1756 /\ 0 <= K:1756
                       /\ 0 <= i':1754 /\ 1 <= i':1754
                       /\ (s':1755 mod 256) <= (s':1748 mod 256)
                       /\ (s':1748 mod 256) <= (s':1755 mod 256)
                       /\ (!(0 <= K:1796) \/ mid_i:1797 = K:1796)
                       /\ (!(0 <= K:1796)
                             \/ (-256 * mid_s:1798) <= ((-256 * havoc:15)
                                                          + (-255 * K:1796)))
                       /\ K:1796 = 0 /\ havoc:15 = mid_s:1798
                       /\ 0 = mid_i:1797 /\ (0 = K:1796 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1799) \/ i':1800 = (mid_i:1797 + K:1799))
                       /\ (!(0 <= K:1799) \/ s':1801 <= mid_s:1798)
                       /\ ((K:1799 = 0 /\ mid_s:1798 = s':1801
                              /\ mid_i:1797 = i':1800)
                             \/ (1 <= K:1799 /\ 0 <= (-1 + -mid_i:1797)
                                   /\ 0 <= (255 + -mid_s:1798
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1798))))
                                   /\ 0 <= floor((1/256 * mid_s:1798))
                                   /\ 0 <= (mid_s:1798
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1798))))
                                   /\ 0 <= mid_i:1797 /\ 0 <= (-1 + i':1800)
                                   /\ 0 <= s':1801 /\ 0 <= -i':1800))
                       /\ (0 = K:1799 \/ -mid_s:1798 <= 0)
                       /\ (K:1796 + K:1799) = K:1802 /\ 0 <= K:1802
                       /\ 0 <= i':1800 /\ 0 <= i':1800
                       /\ (s':1715 mod 256) = phi_tmp:1782
                       /\ (s':1741 mod 256) = phi_tmp___0:1783
                       /\ (s':1748 mod 256) = phi_tmp___1:1784
                       /\ (s':1755 mod 256) = phi_tmp___2:1785
                       /\ (s':1801 mod 256) = phi_tmp___3:1786
                       /\ (s':1801 mod 256) = phi_return:1787
                       /\ havoc:0 = phi_param0:1788 /\ 0 = phi_param1:1789
                       /\ type_err:1803 = phi_return@pos:1790
                       /\ type_err:1804 = phi_param0@pos:1791
                       /\ type_err:1805 = phi_param1@pos:1792
                       /\ type_err:1806 = phi_return@width:1793
                       /\ type_err:1807 = phi_param0@width:1794
                       /\ type_err:1808 = phi_param1@width:1795))
                /\ phi_tmp:1782 = phi_tmp:1809
                /\ phi_tmp___0:1783 = phi_tmp___0:1810
                /\ phi_tmp___1:1784 = phi_tmp___1:1811
                /\ phi_tmp___2:1785 = phi_tmp___2:1812
                /\ phi_tmp___3:1786 = phi_tmp___3:1813
                /\ phi_return:1787 = phi_return:1814
                /\ phi_param0:1788 = phi_param0:1815
                /\ phi_param1:1789 = phi_param1:1816
                /\ phi_return@pos:1790 = phi_return@pos:1817
                /\ phi_param0@pos:1791 = phi_param0@pos:1818
                /\ phi_param1@pos:1792 = phi_param1@pos:1819
                /\ phi_return@width:1793 = phi_return@width:1820
                /\ phi_param0@width:1794 = phi_param0@width:1821
                /\ phi_param1@width:1795 = phi_param1@width:1822)
               \/ (0 <= havoc:0 /\ 0 <= havoc:15
                     /\ (!(0 <= K:1710) \/ mid_i:1711 = K:1710)
                     /\ (!(0 <= K:1710)
                           \/ (-256 * mid_s:1712) <= ((-256 * havoc:15)
                                                        + (-255 * K:1710)))
                     /\ ((K:1710 = 0 /\ havoc:15 = mid_s:1712
                            /\ 0 = mid_i:1711)
                           \/ (1 <= K:1710
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:1712
                                 /\ 0 <= (-1 + mid_i:1711)
                                 /\ 0 <= (2 + -mid_i:1711)))
                     /\ (0 = K:1710 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:1713) \/ i':1714 = (mid_i:1711 + K:1713))
                     /\ (!(0 <= K:1713) \/ s':1715 <= mid_s:1712)
                     /\ ((K:1713 = 0 /\ mid_s:1712 = s':1715
                            /\ mid_i:1711 = i':1714)
                           \/ (1 <= K:1713 /\ 0 <= (-1 + -mid_i:1711 + 2)
                                 /\ 0 <= (255 + -mid_s:1712
                                            + (256
                                                 * floor((1/256 * mid_s:1712))))
                                 /\ 0 <= floor((1/256 * mid_s:1712))
                                 /\ 0 <= (mid_s:1712
                                            + (-256
                                                 * floor((1/256 * mid_s:1712))))
                                 /\ 0 <= mid_i:1711 /\ 0 <= (-1 + i':1714)
                                 /\ 0 <= s':1715 /\ 0 <= (2 + -i':1714)))
                     /\ (0 = K:1713 \/ -mid_s:1712 <= 0)
                     /\ (K:1710 + K:1713) = K:1716 /\ 0 <= K:1716
                     /\ 0 <= i':1714 /\ 2 <= i':1714
                     /\ (!(0 <= K:1736) \/ mid_i:1737 = K:1736)
                     /\ (!(0 <= K:1736)
                           \/ (-256 * mid_s:1738) <= ((-256 * havoc:0)
                                                        + (-255 * K:1736)))
                     /\ ((K:1736 = 0 /\ havoc:0 = mid_s:1738
                            /\ 0 = mid_i:1737)
                           \/ (1 <= K:1736
                                 /\ 0 <= (-havoc:0
                                            + (-256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:0))
                                 /\ 0 <= (255 + havoc:0
                                            + (256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= -mid_s:1738
                                 /\ 0 <= (-1 + mid_i:1737)
                                 /\ 0 <= (2 + -mid_i:1737)))
                     /\ (0 = K:1736 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:1739) \/ i':1740 = (mid_i:1737 + K:1739))
                     /\ (!(0 <= K:1739) \/ s':1741 <= mid_s:1738)
                     /\ ((K:1739 = 0 /\ mid_s:1738 = s':1741
                            /\ mid_i:1737 = i':1740)
                           \/ (1 <= K:1739 /\ 0 <= (-1 + -mid_i:1737 + 2)
                                 /\ 0 <= (255 + -mid_s:1738
                                            + (256
                                                 * floor((1/256 * mid_s:1738))))
                                 /\ 0 <= floor((1/256 * mid_s:1738))
                                 /\ 0 <= (mid_s:1738
                                            + (-256
                                                 * floor((1/256 * mid_s:1738))))
                                 /\ 0 <= mid_i:1737 /\ 0 <= (-1 + i':1740)
                                 /\ 0 <= s':1741 /\ 0 <= (2 + -i':1740)))
                     /\ (0 = K:1739 \/ -mid_s:1738 <= 0)
                     /\ (K:1736 + K:1739) = K:1742 /\ 0 <= K:1742
                     /\ 0 <= i':1740 /\ 2 <= i':1740
                     /\ (s':1741 mod 256) <= (s':1715 mod 256)
                     /\ (s':1715 mod 256) <= (s':1741 mod 256)
                     /\ (!(0 <= K:1743) \/ mid_i:1744 = K:1743)
                     /\ (!(0 <= K:1743)
                           \/ (-256 * mid_s:1745) <= ((-256 * havoc:15)
                                                        + (-255 * K:1743)))
                     /\ ((K:1743 = 0 /\ havoc:15 = mid_s:1745
                            /\ 0 = mid_i:1744)
                           \/ (1 <= K:1743
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:1745
                                 /\ 0 <= (-1 + mid_i:1744)
                                 /\ 0 <= (1 + -mid_i:1744)))
                     /\ (0 = K:1743 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:1746) \/ i':1747 = (mid_i:1744 + K:1746))
                     /\ (!(0 <= K:1746) \/ s':1748 <= mid_s:1745)
                     /\ ((K:1746 = 0 /\ mid_s:1745 = s':1748
                            /\ mid_i:1744 = i':1747)
                           \/ (1 <= K:1746 /\ 0 <= (-1 + -mid_i:1744 + 1)
                                 /\ 0 <= (255 + -mid_s:1745
                                            + (256
                                                 * floor((1/256 * mid_s:1745))))
                                 /\ 0 <= floor((1/256 * mid_s:1745))
                                 /\ 0 <= (mid_s:1745
                                            + (-256
                                                 * floor((1/256 * mid_s:1745))))
                                 /\ 0 <= mid_i:1744 /\ 0 <= (-1 + i':1747)
                                 /\ 0 <= s':1748 /\ 0 <= (1 + -i':1747)))
                     /\ (0 = K:1746 \/ -mid_s:1745 <= 0)
                     /\ (K:1743 + K:1746) = K:1749 /\ 0 <= K:1749
                     /\ 0 <= i':1747 /\ 1 <= i':1747
                     /\ (s':1715 mod 256) = phi_tmp:1809
                     /\ (s':1741 mod 256) = phi_tmp___0:1810
                     /\ (s':1748 mod 256) = phi_tmp___1:1811
                     /\ tmp___2:35 = phi_tmp___2:1812
                     /\ tmp___3:38 = phi_tmp___3:1813
                     /\ (s':1748 mod 256) = phi_return:1814
                     /\ havoc:0 = phi_param0:1815 /\ 1 = phi_param1:1816
                     /\ type_err:1823 = phi_return@pos:1817
                     /\ type_err:1824 = phi_param0@pos:1818
                     /\ type_err:1825 = phi_param1@pos:1819
                     /\ type_err:1826 = phi_return@width:1820
                     /\ type_err:1827 = phi_param0@width:1821
                     /\ type_err:1828 = phi_param1@width:1822)))}
    ( __pstate , (Unique State Name,50)_g1 , __done )	Base relation: 
{password_binval := havoc:15
 guess_binval := havoc:0
 when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
         /\ havoc:15 < 16777216)}

Weights on states: 
__done 0x3024e50: 
	Weight: Base relation: 
{when false}
	Accept: Base relation: 
{}
__pstate 0x34376a0: 
	Weight: Base relation: 
{when false}
	Accept: Base relation: 
{when false}
================================================
Procedure Summaries

------------------------------------------------
Procedure summary for charAtRemoving

Base relation: 
{return := (s':1372 mod 256)
 param0 := param0:246
 param1 := param1:249
 return@pos := type_err:1376
 param0@pos := type_err:256
 param1@pos := type_err:257
 return@width := type_err:1377
 param0@width := type_err:258
 param1@width := type_err:259
 when ((!(0 <= K:1367) \/ mid_i:1368 = K:1367)
         /\ (!(0 <= K:1367)
               \/ (-256 * mid_s:1369) <= ((-256 * param0:246)
                                            + (-255 * K:1367)))
         /\ ((K:1367 = 0 /\ param0:246 = mid_s:1369 /\ 0 = mid_i:1368)
               \/ (1 <= K:1367
                     /\ 0 <= (-param0:246
                                + (-256 * floor((-1/256 * param0:246))))
                     /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                     /\ 0 <= floor((-1/256 * param0:246))
                     /\ 0 <= (255 + param0:246
                                + (256 * floor((-1/256 * param0:246))))
                     /\ 0 <= -mid_s:1369 /\ 0 <= (-1 + mid_i:1368)
                     /\ 0 <= (param1:249 + -mid_i:1368)))
         /\ (0 = K:1367 \/ !(-param0:246 <= 0))
         /\ (!(0 <= K:1370) \/ i':1371 = (mid_i:1368 + K:1370))
         /\ (!(0 <= K:1370) \/ s':1372 <= mid_s:1369)
         /\ ((K:1370 = 0 /\ mid_s:1369 = s':1372 /\ mid_i:1368 = i':1371)
               \/ (1 <= K:1370 /\ 0 <= (-1 + -mid_i:1368 + param1:249)
                     /\ 0 <= (255 + -mid_s:1369
                                + (256 * floor((1/256 * mid_s:1369))))
                     /\ 0 <= floor((1/256 * mid_s:1369))
                     /\ 0 <= (mid_s:1369
                                + (-256 * floor((1/256 * mid_s:1369))))
                     /\ 0 <= mid_i:1368 /\ 0 <= (-1 + i':1371)
                     /\ 0 <= s':1372 /\ 0 <= (param1:249 + -i':1371)))
         /\ (0 = K:1370 \/ -mid_s:1369 <= 0) /\ (K:1367 + K:1370) = K:1373
         /\ 0 <= K:1373 /\ 0 <= i':1371 /\ param1:249 <= i':1371)}

------------------------------------------------
Procedure summary for checkSecret

Base relation: 
{tmp := (s':1383 mod 256)
 tmp___0 := (s':1400 mod 256)
 tmp___1 := phi_tmp___1:1499
 tmp___2 := phi_tmp___2:1498
 tmp___3 := phi_tmp___3:1497
 __retres7 := phi___retres7:1496
 return := phi___retres7:1496
 param0 := guess_binval:4
 param1 := phi_param1:1494
 return@pos := type_err:1500
 param0@pos := phi_param0@pos:1492
 param1@pos := phi_param1@pos:1491
 return@width := type_err:1501
 param0@width := phi_param0@width:1489
 param1@width := phi_param1@width:1488
 when ((((0 <= guess_binval:4 /\ 0 <= password_binval:5
            /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
            /\ (!(0 <= K:1378)
                  \/ (-256 * mid_s:1380) <= ((-256 * password_binval:5)
                                               + (-255 * K:1378)))
            /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                   /\ 0 = mid_i:1379)
                  \/ (1 <= K:1378
                        /\ 0 <= (-password_binval:5
                                   + (-256
                                        * floor((-1/256 * password_binval:5))))
                        /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 2)
                        /\ 0 <= floor((-1/256 * password_binval:5))
                        /\ 0 <= (255 + password_binval:5
                                   + (256
                                        * floor((-1/256 * password_binval:5))))
                        /\ 0 <= -mid_s:1380 /\ 0 <= (-1 + mid_i:1379)
                        /\ 0 <= (2 + -mid_i:1379)))
            /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
            /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
            /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
            /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383 /\ mid_i:1379 = i':1382)
                  \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                        /\ 0 <= (255 + -mid_s:1380
                                   + (256 * floor((1/256 * mid_s:1380))))
                        /\ 0 <= floor((1/256 * mid_s:1380))
                        /\ 0 <= (mid_s:1380
                                   + (-256 * floor((1/256 * mid_s:1380))))
                        /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                        /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
            /\ (0 = K:1381 \/ -mid_s:1380 <= 0) /\ (K:1378 + K:1381) = K:1384
            /\ 0 <= K:1384 /\ 0 <= i':1382 /\ 2 <= i':1382
            /\ (!(0 <= K:1395) \/ mid_i:1396 = K:1395)
            /\ (!(0 <= K:1395)
                  \/ (-256 * mid_s:1397) <= ((-256 * guess_binval:4)
                                               + (-255 * K:1395)))
            /\ ((K:1395 = 0 /\ guess_binval:4 = mid_s:1397 /\ 0 = mid_i:1396)
                  \/ (1 <= K:1395
                        /\ 0 <= (-guess_binval:4
                                   + (-256 * floor((-1/256 * guess_binval:4))))
                        /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                        /\ 0 <= floor((-1/256 * guess_binval:4))
                        /\ 0 <= (255 + guess_binval:4
                                   + (256 * floor((-1/256 * guess_binval:4))))
                        /\ 0 <= -mid_s:1397 /\ 0 <= (-1 + mid_i:1396)
                        /\ 0 <= (2 + -mid_i:1396)))
            /\ (0 = K:1395 \/ !(-guess_binval:4 <= 0))
            /\ (!(0 <= K:1398) \/ i':1399 = (mid_i:1396 + K:1398))
            /\ (!(0 <= K:1398) \/ s':1400 <= mid_s:1397)
            /\ ((K:1398 = 0 /\ mid_s:1397 = s':1400 /\ mid_i:1396 = i':1399)
                  \/ (1 <= K:1398 /\ 0 <= (-1 + -mid_i:1396 + 2)
                        /\ 0 <= (255 + -mid_s:1397
                                   + (256 * floor((1/256 * mid_s:1397))))
                        /\ 0 <= floor((1/256 * mid_s:1397))
                        /\ 0 <= (mid_s:1397
                                   + (-256 * floor((1/256 * mid_s:1397))))
                        /\ 0 <= mid_i:1396 /\ 0 <= (-1 + i':1399)
                        /\ 0 <= s':1400 /\ 0 <= (2 + -i':1399)))
            /\ (0 = K:1398 \/ -mid_s:1397 <= 0) /\ (K:1395 + K:1398) = K:1401
            /\ 0 <= K:1401 /\ 0 <= i':1399 /\ 2 <= i':1399
            /\ ((s':1383 mod 256) < (s':1400 mod 256)
                  \/ (s':1400 mod 256) < (s':1383 mod 256))
            /\ tmp___1:36 = phi_tmp___1:1452 /\ tmp___2:35 = phi_tmp___2:1451
            /\ 0 = phi___retres7:1450 /\ (s':1400 mod 256) = phi_return:1449
            /\ 2 = phi_param1:1448 /\ type_err:1402 = phi_return@pos:1447
            /\ type_err:1403 = phi_param0@pos:1446
            /\ type_err:1404 = phi_param1@pos:1445
            /\ type_err:1405 = phi_return@width:1444
            /\ type_err:1406 = phi_param0@width:1443
            /\ type_err:1407 = phi_param1@width:1442)
           \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
                 /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
                 /\ (!(0 <= K:1378)
                       \/ (-256 * mid_s:1380) <= ((-256 * password_binval:5)
                                                    + (-255 * K:1378)))
                 /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                        /\ 0 = mid_i:1379)
                       \/ (1 <= K:1378
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:1380 /\ 0 <= (-1 + mid_i:1379)
                             /\ 0 <= (2 + -mid_i:1379)))
                 /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
                 /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
                 /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383
                        /\ mid_i:1379 = i':1382)
                       \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                             /\ 0 <= (255 + -mid_s:1380
                                        + (256 * floor((1/256 * mid_s:1380))))
                             /\ 0 <= floor((1/256 * mid_s:1380))
                             /\ 0 <= (mid_s:1380
                                        + (-256 * floor((1/256 * mid_s:1380))))
                             /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                             /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
                 /\ (0 = K:1381 \/ -mid_s:1380 <= 0)
                 /\ (K:1378 + K:1381) = K:1384 /\ 0 <= K:1384 /\ 0 <= i':1382
                 /\ 2 <= i':1382 /\ (!(0 <= K:1395) \/ mid_i:1396 = K:1395)
                 /\ (!(0 <= K:1395)
                       \/ (-256 * mid_s:1397) <= ((-256 * guess_binval:4)
                                                    + (-255 * K:1395)))
                 /\ ((K:1395 = 0 /\ guess_binval:4 = mid_s:1397
                        /\ 0 = mid_i:1396)
                       \/ (1 <= K:1395
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:1397 /\ 0 <= (-1 + mid_i:1396)
                             /\ 0 <= (2 + -mid_i:1396)))
                 /\ (0 = K:1395 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:1398) \/ i':1399 = (mid_i:1396 + K:1398))
                 /\ (!(0 <= K:1398) \/ s':1400 <= mid_s:1397)
                 /\ ((K:1398 = 0 /\ mid_s:1397 = s':1400
                        /\ mid_i:1396 = i':1399)
                       \/ (1 <= K:1398 /\ 0 <= (-1 + -mid_i:1396 + 2)
                             /\ 0 <= (255 + -mid_s:1397
                                        + (256 * floor((1/256 * mid_s:1397))))
                             /\ 0 <= floor((1/256 * mid_s:1397))
                             /\ 0 <= (mid_s:1397
                                        + (-256 * floor((1/256 * mid_s:1397))))
                             /\ 0 <= mid_i:1396 /\ 0 <= (-1 + i':1399)
                             /\ 0 <= s':1400 /\ 0 <= (2 + -i':1399)))
                 /\ (0 = K:1398 \/ -mid_s:1397 <= 0)
                 /\ (K:1395 + K:1398) = K:1401 /\ 0 <= K:1401 /\ 0 <= i':1399
                 /\ 2 <= i':1399 /\ (s':1400 mod 256) <= (s':1383 mod 256)
                 /\ (s':1383 mod 256) <= (s':1400 mod 256)
                 /\ (!(0 <= K:1412) \/ mid_i:1413 = K:1412)
                 /\ (!(0 <= K:1412)
                       \/ (-256 * mid_s:1414) <= ((-256 * password_binval:5)
                                                    + (-255 * K:1412)))
                 /\ ((K:1412 = 0 /\ password_binval:5 = mid_s:1414
                        /\ 0 = mid_i:1413)
                       \/ (1 <= K:1412
                             /\ 0 <= (-password_binval:5
                                        + (-256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= (-1 + -password_binval:5)
                             /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * password_binval:5))
                             /\ 0 <= (255 + password_binval:5
                                        + (256
                                             * floor((-1/256
                                                        * password_binval:5))))
                             /\ 0 <= -mid_s:1414 /\ 0 <= (-1 + mid_i:1413)
                             /\ 0 <= (1 + -mid_i:1413)))
                 /\ (0 = K:1412 \/ !(-password_binval:5 <= 0))
                 /\ (!(0 <= K:1415) \/ i':1416 = (mid_i:1413 + K:1415))
                 /\ (!(0 <= K:1415) \/ s':1417 <= mid_s:1414)
                 /\ ((K:1415 = 0 /\ mid_s:1414 = s':1417
                        /\ mid_i:1413 = i':1416)
                       \/ (1 <= K:1415 /\ 0 <= (-1 + -mid_i:1413 + 1)
                             /\ 0 <= (255 + -mid_s:1414
                                        + (256 * floor((1/256 * mid_s:1414))))
                             /\ 0 <= floor((1/256 * mid_s:1414))
                             /\ 0 <= (mid_s:1414
                                        + (-256 * floor((1/256 * mid_s:1414))))
                             /\ 0 <= mid_i:1413 /\ 0 <= (-1 + i':1416)
                             /\ 0 <= s':1417 /\ 0 <= (1 + -i':1416)))
                 /\ (0 = K:1415 \/ -mid_s:1414 <= 0)
                 /\ (K:1412 + K:1415) = K:1418 /\ 0 <= K:1418 /\ 0 <= i':1416
                 /\ 1 <= i':1416 /\ (!(0 <= K:1429) \/ mid_i:1430 = K:1429)
                 /\ (!(0 <= K:1429)
                       \/ (-256 * mid_s:1431) <= ((-256 * guess_binval:4)
                                                    + (-255 * K:1429)))
                 /\ ((K:1429 = 0 /\ guess_binval:4 = mid_s:1431
                        /\ 0 = mid_i:1430)
                       \/ (1 <= K:1429
                             /\ 0 <= (-guess_binval:4
                                        + (-256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 1)
                             /\ 0 <= floor((-1/256 * guess_binval:4))
                             /\ 0 <= (255 + guess_binval:4
                                        + (256
                                             * floor((-1/256 * guess_binval:4))))
                             /\ 0 <= -mid_s:1431 /\ 0 <= (-1 + mid_i:1430)
                             /\ 0 <= (1 + -mid_i:1430)))
                 /\ (0 = K:1429 \/ !(-guess_binval:4 <= 0))
                 /\ (!(0 <= K:1432) \/ i':1433 = (mid_i:1430 + K:1432))
                 /\ (!(0 <= K:1432) \/ s':1434 <= mid_s:1431)
                 /\ ((K:1432 = 0 /\ mid_s:1431 = s':1434
                        /\ mid_i:1430 = i':1433)
                       \/ (1 <= K:1432 /\ 0 <= (-1 + -mid_i:1430 + 1)
                             /\ 0 <= (255 + -mid_s:1431
                                        + (256 * floor((1/256 * mid_s:1431))))
                             /\ 0 <= floor((1/256 * mid_s:1431))
                             /\ 0 <= (mid_s:1431
                                        + (-256 * floor((1/256 * mid_s:1431))))
                             /\ 0 <= mid_i:1430 /\ 0 <= (-1 + i':1433)
                             /\ 0 <= s':1434 /\ 0 <= (1 + -i':1433)))
                 /\ (0 = K:1432 \/ -mid_s:1431 <= 0)
                 /\ (K:1429 + K:1432) = K:1435 /\ 0 <= K:1435 /\ 0 <= i':1433
                 /\ 1 <= i':1433
                 /\ ((s':1417 mod 256) < (s':1434 mod 256)
                       \/ (s':1434 mod 256) < (s':1417 mod 256))
                 /\ (s':1417 mod 256) = phi_tmp___1:1452
                 /\ (s':1434 mod 256) = phi_tmp___2:1451
                 /\ 1 = phi___retres7:1450
                 /\ (s':1434 mod 256) = phi_return:1449
                 /\ 1 = phi_param1:1448
                 /\ type_err:1436 = phi_return@pos:1447
                 /\ type_err:1437 = phi_param0@pos:1446
                 /\ type_err:1438 = phi_param1@pos:1445
                 /\ type_err:1439 = phi_return@width:1444
                 /\ type_err:1440 = phi_param0@width:1443
                 /\ type_err:1441 = phi_param1@width:1442))
          /\ phi_tmp___1:1452 = phi_tmp___1:1499
          /\ phi_tmp___2:1451 = phi_tmp___2:1498
          /\ tmp___3:38 = phi_tmp___3:1497
          /\ phi___retres7:1450 = phi___retres7:1496
          /\ phi_return:1449 = phi_return:1495
          /\ phi_param1:1448 = phi_param1:1494
          /\ phi_return@pos:1447 = phi_return@pos:1493
          /\ phi_param0@pos:1446 = phi_param0@pos:1492
          /\ phi_param1@pos:1445 = phi_param1@pos:1491
          /\ phi_return@width:1444 = phi_return@width:1490
          /\ phi_param0@width:1443 = phi_param0@width:1489
          /\ phi_param1@width:1442 = phi_param1@width:1488)
         \/ (0 <= guess_binval:4 /\ 0 <= password_binval:5
               /\ (!(0 <= K:1378) \/ mid_i:1379 = K:1378)
               /\ (!(0 <= K:1378)
                     \/ (-256 * mid_s:1380) <= ((-256 * password_binval:5)
                                                  + (-255 * K:1378)))
               /\ ((K:1378 = 0 /\ password_binval:5 = mid_s:1380
                      /\ 0 = mid_i:1379)
                     \/ (1 <= K:1378
                           /\ 0 <= (-password_binval:5
                                      + (-256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 2)
                           /\ 0 <= floor((-1/256 * password_binval:5))
                           /\ 0 <= (255 + password_binval:5
                                      + (256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= -mid_s:1380 /\ 0 <= (-1 + mid_i:1379)
                           /\ 0 <= (2 + -mid_i:1379)))
               /\ (0 = K:1378 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:1381) \/ i':1382 = (mid_i:1379 + K:1381))
               /\ (!(0 <= K:1381) \/ s':1383 <= mid_s:1380)
               /\ ((K:1381 = 0 /\ mid_s:1380 = s':1383
                      /\ mid_i:1379 = i':1382)
                     \/ (1 <= K:1381 /\ 0 <= (-1 + -mid_i:1379 + 2)
                           /\ 0 <= (255 + -mid_s:1380
                                      + (256 * floor((1/256 * mid_s:1380))))
                           /\ 0 <= floor((1/256 * mid_s:1380))
                           /\ 0 <= (mid_s:1380
                                      + (-256 * floor((1/256 * mid_s:1380))))
                           /\ 0 <= mid_i:1379 /\ 0 <= (-1 + i':1382)
                           /\ 0 <= s':1383 /\ 0 <= (2 + -i':1382)))
               /\ (0 = K:1381 \/ -mid_s:1380 <= 0)
               /\ (K:1378 + K:1381) = K:1384 /\ 0 <= K:1384 /\ 0 <= i':1382
               /\ 2 <= i':1382 /\ (!(0 <= K:1395) \/ mid_i:1396 = K:1395)
               /\ (!(0 <= K:1395)
                     \/ (-256 * mid_s:1397) <= ((-256 * guess_binval:4)
                                                  + (-255 * K:1395)))
               /\ ((K:1395 = 0 /\ guess_binval:4 = mid_s:1397
                      /\ 0 = mid_i:1396)
                     \/ (1 <= K:1395
                           /\ 0 <= (-guess_binval:4
                                      + (-256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 2)
                           /\ 0 <= floor((-1/256 * guess_binval:4))
                           /\ 0 <= (255 + guess_binval:4
                                      + (256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= -mid_s:1397 /\ 0 <= (-1 + mid_i:1396)
                           /\ 0 <= (2 + -mid_i:1396)))
               /\ (0 = K:1395 \/ !(-guess_binval:4 <= 0))
               /\ (!(0 <= K:1398) \/ i':1399 = (mid_i:1396 + K:1398))
               /\ (!(0 <= K:1398) \/ s':1400 <= mid_s:1397)
               /\ ((K:1398 = 0 /\ mid_s:1397 = s':1400
                      /\ mid_i:1396 = i':1399)
                     \/ (1 <= K:1398 /\ 0 <= (-1 + -mid_i:1396 + 2)
                           /\ 0 <= (255 + -mid_s:1397
                                      + (256 * floor((1/256 * mid_s:1397))))
                           /\ 0 <= floor((1/256 * mid_s:1397))
                           /\ 0 <= (mid_s:1397
                                      + (-256 * floor((1/256 * mid_s:1397))))
                           /\ 0 <= mid_i:1396 /\ 0 <= (-1 + i':1399)
                           /\ 0 <= s':1400 /\ 0 <= (2 + -i':1399)))
               /\ (0 = K:1398 \/ -mid_s:1397 <= 0)
               /\ (K:1395 + K:1398) = K:1401 /\ 0 <= K:1401 /\ 0 <= i':1399
               /\ 2 <= i':1399 /\ (s':1400 mod 256) <= (s':1383 mod 256)
               /\ (s':1383 mod 256) <= (s':1400 mod 256)
               /\ (!(0 <= K:1412) \/ mid_i:1413 = K:1412)
               /\ (!(0 <= K:1412)
                     \/ (-256 * mid_s:1414) <= ((-256 * password_binval:5)
                                                  + (-255 * K:1412)))
               /\ ((K:1412 = 0 /\ password_binval:5 = mid_s:1414
                      /\ 0 = mid_i:1413)
                     \/ (1 <= K:1412
                           /\ 0 <= (-password_binval:5
                                      + (-256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= (-1 + -password_binval:5) /\ 0 <= (-1 + 1)
                           /\ 0 <= floor((-1/256 * password_binval:5))
                           /\ 0 <= (255 + password_binval:5
                                      + (256
                                           * floor((-1/256
                                                      * password_binval:5))))
                           /\ 0 <= -mid_s:1414 /\ 0 <= (-1 + mid_i:1413)
                           /\ 0 <= (1 + -mid_i:1413)))
               /\ (0 = K:1412 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:1415) \/ i':1416 = (mid_i:1413 + K:1415))
               /\ (!(0 <= K:1415) \/ s':1417 <= mid_s:1414)
               /\ ((K:1415 = 0 /\ mid_s:1414 = s':1417
                      /\ mid_i:1413 = i':1416)
                     \/ (1 <= K:1415 /\ 0 <= (-1 + -mid_i:1413 + 1)
                           /\ 0 <= (255 + -mid_s:1414
                                      + (256 * floor((1/256 * mid_s:1414))))
                           /\ 0 <= floor((1/256 * mid_s:1414))
                           /\ 0 <= (mid_s:1414
                                      + (-256 * floor((1/256 * mid_s:1414))))
                           /\ 0 <= mid_i:1413 /\ 0 <= (-1 + i':1416)
                           /\ 0 <= s':1417 /\ 0 <= (1 + -i':1416)))
               /\ (0 = K:1415 \/ -mid_s:1414 <= 0)
               /\ (K:1412 + K:1415) = K:1418 /\ 0 <= K:1418 /\ 0 <= i':1416
               /\ 1 <= i':1416 /\ (!(0 <= K:1429) \/ mid_i:1430 = K:1429)
               /\ (!(0 <= K:1429)
                     \/ (-256 * mid_s:1431) <= ((-256 * guess_binval:4)
                                                  + (-255 * K:1429)))
               /\ ((K:1429 = 0 /\ guess_binval:4 = mid_s:1431
                      /\ 0 = mid_i:1430)
                     \/ (1 <= K:1429
                           /\ 0 <= (-guess_binval:4
                                      + (-256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= (-1 + -guess_binval:4) /\ 0 <= (-1 + 1)
                           /\ 0 <= floor((-1/256 * guess_binval:4))
                           /\ 0 <= (255 + guess_binval:4
                                      + (256
                                           * floor((-1/256 * guess_binval:4))))
                           /\ 0 <= -mid_s:1431 /\ 0 <= (-1 + mid_i:1430)
                           /\ 0 <= (1 + -mid_i:1430)))
               /\ (0 = K:1429 \/ !(-guess_binval:4 <= 0))
               /\ (!(0 <= K:1432) \/ i':1433 = (mid_i:1430 + K:1432))
               /\ (!(0 <= K:1432) \/ s':1434 <= mid_s:1431)
               /\ ((K:1432 = 0 /\ mid_s:1431 = s':1434
                      /\ mid_i:1430 = i':1433)
                     \/ (1 <= K:1432 /\ 0 <= (-1 + -mid_i:1430 + 1)
                           /\ 0 <= (255 + -mid_s:1431
                                      + (256 * floor((1/256 * mid_s:1431))))
                           /\ 0 <= floor((1/256 * mid_s:1431))
                           /\ 0 <= (mid_s:1431
                                      + (-256 * floor((1/256 * mid_s:1431))))
                           /\ 0 <= mid_i:1430 /\ 0 <= (-1 + i':1433)
                           /\ 0 <= s':1434 /\ 0 <= (1 + -i':1433)))
               /\ (0 = K:1432 \/ -mid_s:1431 <= 0)
               /\ (K:1429 + K:1432) = K:1435 /\ 0 <= K:1435 /\ 0 <= i':1433
               /\ 1 <= i':1433 /\ (s':1434 mod 256) <= (s':1417 mod 256)
               /\ (s':1417 mod 256) <= (s':1434 mod 256)
               /\ (!(0 <= K:1457) \/ mid_i:1458 = K:1457)
               /\ (!(0 <= K:1457)
                     \/ (-256 * mid_s:1459) <= ((-256 * password_binval:5)
                                                  + (-255 * K:1457)))
               /\ K:1457 = 0 /\ password_binval:5 = mid_s:1459
               /\ 0 = mid_i:1458
               /\ (0 = K:1457 \/ !(-password_binval:5 <= 0))
               /\ (!(0 <= K:1460) \/ i':1461 = (mid_i:1458 + K:1460))
               /\ (!(0 <= K:1460) \/ s':1462 <= mid_s:1459)
               /\ ((K:1460 = 0 /\ mid_s:1459 = s':1462
                      /\ mid_i:1458 = i':1461)
                     \/ (1 <= K:1460 /\ 0 <= (-1 + -mid_i:1458)
                           /\ 0 <= (255 + -mid_s:1459
                                      + (256 * floor((1/256 * mid_s:1459))))
                           /\ 0 <= floor((1/256 * mid_s:1459))
                           /\ 0 <= (mid_s:1459
                                      + (-256 * floor((1/256 * mid_s:1459))))
                           /\ 0 <= mid_i:1458 /\ 0 <= (-1 + i':1461)
                           /\ 0 <= s':1462 /\ 0 <= -i':1461))
               /\ (0 = K:1460 \/ -mid_s:1459 <= 0)
               /\ (K:1457 + K:1460) = K:1463 /\ 0 <= K:1463 /\ 0 <= i':1461
               /\ 0 <= i':1461 /\ (!(0 <= K:1474) \/ mid_i:1475 = K:1474)
               /\ (!(0 <= K:1474)
                     \/ (-256 * mid_s:1476) <= ((-256 * guess_binval:4)
                                                  + (-255 * K:1474)))
               /\ K:1474 = 0 /\ guess_binval:4 = mid_s:1476 /\ 0 = mid_i:1475
               /\ (0 = K:1474 \/ !(-guess_binval:4 <= 0))
               /\ (!(0 <= K:1477) \/ i':1478 = (mid_i:1475 + K:1477))
               /\ (!(0 <= K:1477) \/ s':1479 <= mid_s:1476)
               /\ ((K:1477 = 0 /\ mid_s:1476 = s':1479
                      /\ mid_i:1475 = i':1478)
                     \/ (1 <= K:1477 /\ 0 <= (-1 + -mid_i:1475)
                           /\ 0 <= (255 + -mid_s:1476
                                      + (256 * floor((1/256 * mid_s:1476))))
                           /\ 0 <= floor((1/256 * mid_s:1476))
                           /\ 0 <= (mid_s:1476
                                      + (-256 * floor((1/256 * mid_s:1476))))
                           /\ 0 <= mid_i:1475 /\ 0 <= (-1 + i':1478)
                           /\ 0 <= s':1479 /\ 0 <= -i':1478))
               /\ (0 = K:1477 \/ -mid_s:1476 <= 0)
               /\ (K:1474 + K:1477) = K:1480 /\ 0 <= K:1480 /\ 0 <= i':1478
               /\ 0 <= i':1478
               /\ ((((s':1462 mod 256) < (s':1479 mod 256)
                       \/ (s':1479 mod 256) < (s':1462 mod 256))
                      /\ 2 = phi___retres7:1487)
                     \/ ((s':1479 mod 256) <= (s':1462 mod 256)
                           /\ (s':1462 mod 256) <= (s':1479 mod 256)
                           /\ 3 = phi___retres7:1487))
               /\ (s':1417 mod 256) = phi_tmp___1:1499
               /\ (s':1434 mod 256) = phi_tmp___2:1498
               /\ (s':1462 mod 256) = phi_tmp___3:1497
               /\ phi___retres7:1487 = phi___retres7:1496
               /\ (s':1479 mod 256) = phi_return:1495 /\ 0 = phi_param1:1494
               /\ type_err:1481 = phi_return@pos:1493
               /\ type_err:1482 = phi_param0@pos:1492
               /\ type_err:1483 = phi_param1@pos:1491
               /\ type_err:1484 = phi_return@width:1490
               /\ type_err:1485 = phi_param0@width:1489
               /\ type_err:1486 = phi_param1@width:1488))}

------------------------------------------------
Procedure summary for main

Base relation: 
{result := phi___retres7:1304
 password_binval := havoc:15
 guess_binval := havoc:0
 return := havoc:1364
 param0 := havoc:0
 param1 := phi_param1:1306
 return@pos := type_err:1365
 param0@pos := phi_param0@pos:1308
 param1@pos := phi_param1@pos:1309
 return@width := type_err:1366
 param0@width := phi_param0@width:1311
 param1@width := phi_param1@width:1312
 when (0 <= havoc:0 /\ 0 <= havoc:15 /\ havoc:0 < 16777216
         /\ havoc:15 < 16777216
         /\ ((((0 <= havoc:0 /\ 0 <= havoc:15
                  /\ (!(0 <= K:1229) \/ mid_i:1230 = K:1229)
                  /\ (!(0 <= K:1229)
                        \/ (-256 * mid_s:1231) <= ((-256 * havoc:15)
                                                     + (-255 * K:1229)))
                  /\ ((K:1229 = 0 /\ havoc:15 = mid_s:1231 /\ 0 = mid_i:1230)
                        \/ (1 <= K:1229
                              /\ 0 <= (-havoc:15
                                         + (-256 * floor((-1/256 * havoc:15))))
                              /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                              /\ 0 <= floor((-1/256 * havoc:15))
                              /\ 0 <= (255 + havoc:15
                                         + (256 * floor((-1/256 * havoc:15))))
                              /\ 0 <= -mid_s:1231 /\ 0 <= (-1 + mid_i:1230)
                              /\ 0 <= (2 + -mid_i:1230)))
                  /\ (0 = K:1229 \/ !(-havoc:15 <= 0))
                  /\ (!(0 <= K:1232) \/ i':1233 = (mid_i:1230 + K:1232))
                  /\ (!(0 <= K:1232) \/ s':1234 <= mid_s:1231)
                  /\ ((K:1232 = 0 /\ mid_s:1231 = s':1234
                         /\ mid_i:1230 = i':1233)
                        \/ (1 <= K:1232 /\ 0 <= (-1 + -mid_i:1230 + 2)
                              /\ 0 <= (255 + -mid_s:1231
                                         + (256 * floor((1/256 * mid_s:1231))))
                              /\ 0 <= floor((1/256 * mid_s:1231))
                              /\ 0 <= (mid_s:1231
                                         + (-256
                                              * floor((1/256 * mid_s:1231))))
                              /\ 0 <= mid_i:1230 /\ 0 <= (-1 + i':1233)
                              /\ 0 <= s':1234 /\ 0 <= (2 + -i':1233)))
                  /\ (0 = K:1232 \/ -mid_s:1231 <= 0)
                  /\ (K:1229 + K:1232) = K:1235 /\ 0 <= K:1235
                  /\ 0 <= i':1233 /\ 2 <= i':1233
                  /\ (!(0 <= K:1236) \/ mid_i:1237 = K:1236)
                  /\ (!(0 <= K:1236)
                        \/ (-256 * mid_s:1238) <= ((-256 * havoc:0)
                                                     + (-255 * K:1236)))
                  /\ ((K:1236 = 0 /\ havoc:0 = mid_s:1238 /\ 0 = mid_i:1237)
                        \/ (1 <= K:1236
                              /\ 0 <= (-havoc:0
                                         + (-256 * floor((-1/256 * havoc:0))))
                              /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                              /\ 0 <= floor((-1/256 * havoc:0))
                              /\ 0 <= (255 + havoc:0
                                         + (256 * floor((-1/256 * havoc:0))))
                              /\ 0 <= -mid_s:1238 /\ 0 <= (-1 + mid_i:1237)
                              /\ 0 <= (2 + -mid_i:1237)))
                  /\ (0 = K:1236 \/ !(-havoc:0 <= 0))
                  /\ (!(0 <= K:1239) \/ i':1240 = (mid_i:1237 + K:1239))
                  /\ (!(0 <= K:1239) \/ s':1241 <= mid_s:1238)
                  /\ ((K:1239 = 0 /\ mid_s:1238 = s':1241
                         /\ mid_i:1237 = i':1240)
                        \/ (1 <= K:1239 /\ 0 <= (-1 + -mid_i:1237 + 2)
                              /\ 0 <= (255 + -mid_s:1238
                                         + (256 * floor((1/256 * mid_s:1238))))
                              /\ 0 <= floor((1/256 * mid_s:1238))
                              /\ 0 <= (mid_s:1238
                                         + (-256
                                              * floor((1/256 * mid_s:1238))))
                              /\ 0 <= mid_i:1237 /\ 0 <= (-1 + i':1240)
                              /\ 0 <= s':1241 /\ 0 <= (2 + -i':1240)))
                  /\ (0 = K:1239 \/ -mid_s:1238 <= 0)
                  /\ (K:1236 + K:1239) = K:1242 /\ 0 <= K:1242
                  /\ 0 <= i':1240 /\ 2 <= i':1240
                  /\ ((s':1234 mod 256) < (s':1241 mod 256)
                        \/ (s':1241 mod 256) < (s':1234 mod 256))
                  /\ (s':1234 mod 256) = phi_tmp:1243
                  /\ (s':1241 mod 256) = phi_tmp___0:1244
                  /\ tmp___1:1245 = phi_tmp___1:1246
                  /\ tmp___2:1247 = phi_tmp___2:1248
                  /\ 0 = phi___retres7:1249
                  /\ (s':1241 mod 256) = phi_return:1250
                  /\ 2 = phi_param1:1251
                  /\ type_err:1252 = phi_return@pos:1253
                  /\ type_err:1254 = phi_param0@pos:1255
                  /\ type_err:1256 = phi_param1@pos:1257
                  /\ type_err:1258 = phi_return@width:1259
                  /\ type_err:1260 = phi_param0@width:1261
                  /\ type_err:1262 = phi_param1@width:1263)
                 \/ (0 <= havoc:0 /\ 0 <= havoc:15
                       /\ (!(0 <= K:1264) \/ mid_i:1265 = K:1264)
                       /\ (!(0 <= K:1264)
                             \/ (-256 * mid_s:1266) <= ((-256 * havoc:15)
                                                          + (-255 * K:1264)))
                       /\ ((K:1264 = 0 /\ havoc:15 = mid_s:1266
                              /\ 0 = mid_i:1265)
                             \/ (1 <= K:1264
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:1266
                                   /\ 0 <= (-1 + mid_i:1265)
                                   /\ 0 <= (2 + -mid_i:1265)))
                       /\ (0 = K:1264 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1267) \/ i':1268 = (mid_i:1265 + K:1267))
                       /\ (!(0 <= K:1267) \/ s':1269 <= mid_s:1266)
                       /\ ((K:1267 = 0 /\ mid_s:1266 = s':1269
                              /\ mid_i:1265 = i':1268)
                             \/ (1 <= K:1267 /\ 0 <= (-1 + -mid_i:1265 + 2)
                                   /\ 0 <= (255 + -mid_s:1266
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1266))))
                                   /\ 0 <= floor((1/256 * mid_s:1266))
                                   /\ 0 <= (mid_s:1266
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1266))))
                                   /\ 0 <= mid_i:1265 /\ 0 <= (-1 + i':1268)
                                   /\ 0 <= s':1269 /\ 0 <= (2 + -i':1268)))
                       /\ (0 = K:1267 \/ -mid_s:1266 <= 0)
                       /\ (K:1264 + K:1267) = K:1270 /\ 0 <= K:1270
                       /\ 0 <= i':1268 /\ 2 <= i':1268
                       /\ (!(0 <= K:1271) \/ mid_i:1272 = K:1271)
                       /\ (!(0 <= K:1271)
                             \/ (-256 * mid_s:1273) <= ((-256 * havoc:0)
                                                          + (-255 * K:1271)))
                       /\ ((K:1271 = 0 /\ havoc:0 = mid_s:1273
                              /\ 0 = mid_i:1272)
                             \/ (1 <= K:1271
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:1273
                                   /\ 0 <= (-1 + mid_i:1272)
                                   /\ 0 <= (2 + -mid_i:1272)))
                       /\ (0 = K:1271 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:1274) \/ i':1275 = (mid_i:1272 + K:1274))
                       /\ (!(0 <= K:1274) \/ s':1276 <= mid_s:1273)
                       /\ ((K:1274 = 0 /\ mid_s:1273 = s':1276
                              /\ mid_i:1272 = i':1275)
                             \/ (1 <= K:1274 /\ 0 <= (-1 + -mid_i:1272 + 2)
                                   /\ 0 <= (255 + -mid_s:1273
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1273))))
                                   /\ 0 <= floor((1/256 * mid_s:1273))
                                   /\ 0 <= (mid_s:1273
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1273))))
                                   /\ 0 <= mid_i:1272 /\ 0 <= (-1 + i':1275)
                                   /\ 0 <= s':1276 /\ 0 <= (2 + -i':1275)))
                       /\ (0 = K:1274 \/ -mid_s:1273 <= 0)
                       /\ (K:1271 + K:1274) = K:1277 /\ 0 <= K:1277
                       /\ 0 <= i':1275 /\ 2 <= i':1275
                       /\ (s':1276 mod 256) <= (s':1269 mod 256)
                       /\ (s':1269 mod 256) <= (s':1276 mod 256)
                       /\ (!(0 <= K:1278) \/ mid_i:1279 = K:1278)
                       /\ (!(0 <= K:1278)
                             \/ (-256 * mid_s:1280) <= ((-256 * havoc:15)
                                                          + (-255 * K:1278)))
                       /\ ((K:1278 = 0 /\ havoc:15 = mid_s:1280
                              /\ 0 = mid_i:1279)
                             \/ (1 <= K:1278
                                   /\ 0 <= (-havoc:15
                                              + (-256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:15))
                                   /\ 0 <= (255 + havoc:15
                                              + (256
                                                   * floor((-1/256 * havoc:15))))
                                   /\ 0 <= -mid_s:1280
                                   /\ 0 <= (-1 + mid_i:1279)
                                   /\ 0 <= (1 + -mid_i:1279)))
                       /\ (0 = K:1278 \/ !(-havoc:15 <= 0))
                       /\ (!(0 <= K:1281) \/ i':1282 = (mid_i:1279 + K:1281))
                       /\ (!(0 <= K:1281) \/ s':1283 <= mid_s:1280)
                       /\ ((K:1281 = 0 /\ mid_s:1280 = s':1283
                              /\ mid_i:1279 = i':1282)
                             \/ (1 <= K:1281 /\ 0 <= (-1 + -mid_i:1279 + 1)
                                   /\ 0 <= (255 + -mid_s:1280
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1280))))
                                   /\ 0 <= floor((1/256 * mid_s:1280))
                                   /\ 0 <= (mid_s:1280
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1280))))
                                   /\ 0 <= mid_i:1279 /\ 0 <= (-1 + i':1282)
                                   /\ 0 <= s':1283 /\ 0 <= (1 + -i':1282)))
                       /\ (0 = K:1281 \/ -mid_s:1280 <= 0)
                       /\ (K:1278 + K:1281) = K:1284 /\ 0 <= K:1284
                       /\ 0 <= i':1282 /\ 1 <= i':1282
                       /\ (!(0 <= K:1285) \/ mid_i:1286 = K:1285)
                       /\ (!(0 <= K:1285)
                             \/ (-256 * mid_s:1287) <= ((-256 * havoc:0)
                                                          + (-255 * K:1285)))
                       /\ ((K:1285 = 0 /\ havoc:0 = mid_s:1287
                              /\ 0 = mid_i:1286)
                             \/ (1 <= K:1285
                                   /\ 0 <= (-havoc:0
                                              + (-256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                   /\ 0 <= floor((-1/256 * havoc:0))
                                   /\ 0 <= (255 + havoc:0
                                              + (256
                                                   * floor((-1/256 * havoc:0))))
                                   /\ 0 <= -mid_s:1287
                                   /\ 0 <= (-1 + mid_i:1286)
                                   /\ 0 <= (1 + -mid_i:1286)))
                       /\ (0 = K:1285 \/ !(-havoc:0 <= 0))
                       /\ (!(0 <= K:1288) \/ i':1289 = (mid_i:1286 + K:1288))
                       /\ (!(0 <= K:1288) \/ s':1290 <= mid_s:1287)
                       /\ ((K:1288 = 0 /\ mid_s:1287 = s':1290
                              /\ mid_i:1286 = i':1289)
                             \/ (1 <= K:1288 /\ 0 <= (-1 + -mid_i:1286 + 1)
                                   /\ 0 <= (255 + -mid_s:1287
                                              + (256
                                                   * floor((1/256
                                                              * mid_s:1287))))
                                   /\ 0 <= floor((1/256 * mid_s:1287))
                                   /\ 0 <= (mid_s:1287
                                              + (-256
                                                   * floor((1/256
                                                              * mid_s:1287))))
                                   /\ 0 <= mid_i:1286 /\ 0 <= (-1 + i':1289)
                                   /\ 0 <= s':1290 /\ 0 <= (1 + -i':1289)))
                       /\ (0 = K:1288 \/ -mid_s:1287 <= 0)
                       /\ (K:1285 + K:1288) = K:1291 /\ 0 <= K:1291
                       /\ 0 <= i':1289 /\ 1 <= i':1289
                       /\ ((s':1283 mod 256) < (s':1290 mod 256)
                             \/ (s':1290 mod 256) < (s':1283 mod 256))
                       /\ (s':1269 mod 256) = phi_tmp:1243
                       /\ (s':1276 mod 256) = phi_tmp___0:1244
                       /\ (s':1283 mod 256) = phi_tmp___1:1246
                       /\ (s':1290 mod 256) = phi_tmp___2:1248
                       /\ 1 = phi___retres7:1249
                       /\ (s':1290 mod 256) = phi_return:1250
                       /\ 1 = phi_param1:1251
                       /\ type_err:1292 = phi_return@pos:1253
                       /\ type_err:1293 = phi_param0@pos:1255
                       /\ type_err:1294 = phi_param1@pos:1257
                       /\ type_err:1295 = phi_return@width:1259
                       /\ type_err:1296 = phi_param0@width:1261
                       /\ type_err:1297 = phi_param1@width:1263))
                /\ phi_tmp:1243 = phi_tmp:1298
                /\ phi_tmp___0:1244 = phi_tmp___0:1299
                /\ phi_tmp___1:1246 = phi_tmp___1:1300
                /\ phi_tmp___2:1248 = phi_tmp___2:1301
                /\ tmp___3:1302 = phi_tmp___3:1303
                /\ phi___retres7:1249 = phi___retres7:1304
                /\ phi_return:1250 = phi_return:1305
                /\ phi_param1:1251 = phi_param1:1306
                /\ phi_return@pos:1253 = phi_return@pos:1307
                /\ phi_param0@pos:1255 = phi_param0@pos:1308
                /\ phi_param1@pos:1257 = phi_param1@pos:1309
                /\ phi_return@width:1259 = phi_return@width:1310
                /\ phi_param0@width:1261 = phi_param0@width:1311
                /\ phi_param1@width:1263 = phi_param1@width:1312)
               \/ (0 <= havoc:0 /\ 0 <= havoc:15
                     /\ (!(0 <= K:1313) \/ mid_i:1314 = K:1313)
                     /\ (!(0 <= K:1313)
                           \/ (-256 * mid_s:1315) <= ((-256 * havoc:15)
                                                        + (-255 * K:1313)))
                     /\ ((K:1313 = 0 /\ havoc:15 = mid_s:1315
                            /\ 0 = mid_i:1314)
                           \/ (1 <= K:1313
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:1315
                                 /\ 0 <= (-1 + mid_i:1314)
                                 /\ 0 <= (2 + -mid_i:1314)))
                     /\ (0 = K:1313 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:1316) \/ i':1317 = (mid_i:1314 + K:1316))
                     /\ (!(0 <= K:1316) \/ s':1318 <= mid_s:1315)
                     /\ ((K:1316 = 0 /\ mid_s:1315 = s':1318
                            /\ mid_i:1314 = i':1317)
                           \/ (1 <= K:1316 /\ 0 <= (-1 + -mid_i:1314 + 2)
                                 /\ 0 <= (255 + -mid_s:1315
                                            + (256
                                                 * floor((1/256 * mid_s:1315))))
                                 /\ 0 <= floor((1/256 * mid_s:1315))
                                 /\ 0 <= (mid_s:1315
                                            + (-256
                                                 * floor((1/256 * mid_s:1315))))
                                 /\ 0 <= mid_i:1314 /\ 0 <= (-1 + i':1317)
                                 /\ 0 <= s':1318 /\ 0 <= (2 + -i':1317)))
                     /\ (0 = K:1316 \/ -mid_s:1315 <= 0)
                     /\ (K:1313 + K:1316) = K:1319 /\ 0 <= K:1319
                     /\ 0 <= i':1317 /\ 2 <= i':1317
                     /\ (!(0 <= K:1320) \/ mid_i:1321 = K:1320)
                     /\ (!(0 <= K:1320)
                           \/ (-256 * mid_s:1322) <= ((-256 * havoc:0)
                                                        + (-255 * K:1320)))
                     /\ ((K:1320 = 0 /\ havoc:0 = mid_s:1322
                            /\ 0 = mid_i:1321)
                           \/ (1 <= K:1320
                                 /\ 0 <= (-havoc:0
                                            + (-256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 2)
                                 /\ 0 <= floor((-1/256 * havoc:0))
                                 /\ 0 <= (255 + havoc:0
                                            + (256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= -mid_s:1322
                                 /\ 0 <= (-1 + mid_i:1321)
                                 /\ 0 <= (2 + -mid_i:1321)))
                     /\ (0 = K:1320 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:1323) \/ i':1324 = (mid_i:1321 + K:1323))
                     /\ (!(0 <= K:1323) \/ s':1325 <= mid_s:1322)
                     /\ ((K:1323 = 0 /\ mid_s:1322 = s':1325
                            /\ mid_i:1321 = i':1324)
                           \/ (1 <= K:1323 /\ 0 <= (-1 + -mid_i:1321 + 2)
                                 /\ 0 <= (255 + -mid_s:1322
                                            + (256
                                                 * floor((1/256 * mid_s:1322))))
                                 /\ 0 <= floor((1/256 * mid_s:1322))
                                 /\ 0 <= (mid_s:1322
                                            + (-256
                                                 * floor((1/256 * mid_s:1322))))
                                 /\ 0 <= mid_i:1321 /\ 0 <= (-1 + i':1324)
                                 /\ 0 <= s':1325 /\ 0 <= (2 + -i':1324)))
                     /\ (0 = K:1323 \/ -mid_s:1322 <= 0)
                     /\ (K:1320 + K:1323) = K:1326 /\ 0 <= K:1326
                     /\ 0 <= i':1324 /\ 2 <= i':1324
                     /\ (s':1325 mod 256) <= (s':1318 mod 256)
                     /\ (s':1318 mod 256) <= (s':1325 mod 256)
                     /\ (!(0 <= K:1327) \/ mid_i:1328 = K:1327)
                     /\ (!(0 <= K:1327)
                           \/ (-256 * mid_s:1329) <= ((-256 * havoc:15)
                                                        + (-255 * K:1327)))
                     /\ ((K:1327 = 0 /\ havoc:15 = mid_s:1329
                            /\ 0 = mid_i:1328)
                           \/ (1 <= K:1327
                                 /\ 0 <= (-havoc:15
                                            + (-256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= (-1 + -havoc:15) /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * havoc:15))
                                 /\ 0 <= (255 + havoc:15
                                            + (256
                                                 * floor((-1/256 * havoc:15))))
                                 /\ 0 <= -mid_s:1329
                                 /\ 0 <= (-1 + mid_i:1328)
                                 /\ 0 <= (1 + -mid_i:1328)))
                     /\ (0 = K:1327 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:1330) \/ i':1331 = (mid_i:1328 + K:1330))
                     /\ (!(0 <= K:1330) \/ s':1332 <= mid_s:1329)
                     /\ ((K:1330 = 0 /\ mid_s:1329 = s':1332
                            /\ mid_i:1328 = i':1331)
                           \/ (1 <= K:1330 /\ 0 <= (-1 + -mid_i:1328 + 1)
                                 /\ 0 <= (255 + -mid_s:1329
                                            + (256
                                                 * floor((1/256 * mid_s:1329))))
                                 /\ 0 <= floor((1/256 * mid_s:1329))
                                 /\ 0 <= (mid_s:1329
                                            + (-256
                                                 * floor((1/256 * mid_s:1329))))
                                 /\ 0 <= mid_i:1328 /\ 0 <= (-1 + i':1331)
                                 /\ 0 <= s':1332 /\ 0 <= (1 + -i':1331)))
                     /\ (0 = K:1330 \/ -mid_s:1329 <= 0)
                     /\ (K:1327 + K:1330) = K:1333 /\ 0 <= K:1333
                     /\ 0 <= i':1331 /\ 1 <= i':1331
                     /\ (!(0 <= K:1334) \/ mid_i:1335 = K:1334)
                     /\ (!(0 <= K:1334)
                           \/ (-256 * mid_s:1336) <= ((-256 * havoc:0)
                                                        + (-255 * K:1334)))
                     /\ ((K:1334 = 0 /\ havoc:0 = mid_s:1336
                            /\ 0 = mid_i:1335)
                           \/ (1 <= K:1334
                                 /\ 0 <= (-havoc:0
                                            + (-256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= (-1 + -havoc:0) /\ 0 <= (-1 + 1)
                                 /\ 0 <= floor((-1/256 * havoc:0))
                                 /\ 0 <= (255 + havoc:0
                                            + (256
                                                 * floor((-1/256 * havoc:0))))
                                 /\ 0 <= -mid_s:1336
                                 /\ 0 <= (-1 + mid_i:1335)
                                 /\ 0 <= (1 + -mid_i:1335)))
                     /\ (0 = K:1334 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:1337) \/ i':1338 = (mid_i:1335 + K:1337))
                     /\ (!(0 <= K:1337) \/ s':1339 <= mid_s:1336)
                     /\ ((K:1337 = 0 /\ mid_s:1336 = s':1339
                            /\ mid_i:1335 = i':1338)
                           \/ (1 <= K:1337 /\ 0 <= (-1 + -mid_i:1335 + 1)
                                 /\ 0 <= (255 + -mid_s:1336
                                            + (256
                                                 * floor((1/256 * mid_s:1336))))
                                 /\ 0 <= floor((1/256 * mid_s:1336))
                                 /\ 0 <= (mid_s:1336
                                            + (-256
                                                 * floor((1/256 * mid_s:1336))))
                                 /\ 0 <= mid_i:1335 /\ 0 <= (-1 + i':1338)
                                 /\ 0 <= s':1339 /\ 0 <= (1 + -i':1338)))
                     /\ (0 = K:1337 \/ -mid_s:1336 <= 0)
                     /\ (K:1334 + K:1337) = K:1340 /\ 0 <= K:1340
                     /\ 0 <= i':1338 /\ 1 <= i':1338
                     /\ (s':1339 mod 256) <= (s':1332 mod 256)
                     /\ (s':1332 mod 256) <= (s':1339 mod 256)
                     /\ (!(0 <= K:1341) \/ mid_i:1342 = K:1341)
                     /\ (!(0 <= K:1341)
                           \/ (-256 * mid_s:1343) <= ((-256 * havoc:15)
                                                        + (-255 * K:1341)))
                     /\ K:1341 = 0 /\ havoc:15 = mid_s:1343 /\ 0 = mid_i:1342
                     /\ (0 = K:1341 \/ !(-havoc:15 <= 0))
                     /\ (!(0 <= K:1344) \/ i':1345 = (mid_i:1342 + K:1344))
                     /\ (!(0 <= K:1344) \/ s':1346 <= mid_s:1343)
                     /\ ((K:1344 = 0 /\ mid_s:1343 = s':1346
                            /\ mid_i:1342 = i':1345)
                           \/ (1 <= K:1344 /\ 0 <= (-1 + -mid_i:1342)
                                 /\ 0 <= (255 + -mid_s:1343
                                            + (256
                                                 * floor((1/256 * mid_s:1343))))
                                 /\ 0 <= floor((1/256 * mid_s:1343))
                                 /\ 0 <= (mid_s:1343
                                            + (-256
                                                 * floor((1/256 * mid_s:1343))))
                                 /\ 0 <= mid_i:1342 /\ 0 <= (-1 + i':1345)
                                 /\ 0 <= s':1346 /\ 0 <= -i':1345))
                     /\ (0 = K:1344 \/ -mid_s:1343 <= 0)
                     /\ (K:1341 + K:1344) = K:1347 /\ 0 <= K:1347
                     /\ 0 <= i':1345 /\ 0 <= i':1345
                     /\ (!(0 <= K:1348) \/ mid_i:1349 = K:1348)
                     /\ (!(0 <= K:1348)
                           \/ (-256 * mid_s:1350) <= ((-256 * havoc:0)
                                                        + (-255 * K:1348)))
                     /\ K:1348 = 0 /\ havoc:0 = mid_s:1350 /\ 0 = mid_i:1349
                     /\ (0 = K:1348 \/ !(-havoc:0 <= 0))
                     /\ (!(0 <= K:1351) \/ i':1352 = (mid_i:1349 + K:1351))
                     /\ (!(0 <= K:1351) \/ s':1353 <= mid_s:1350)
                     /\ ((K:1351 = 0 /\ mid_s:1350 = s':1353
                            /\ mid_i:1349 = i':1352)
                           \/ (1 <= K:1351 /\ 0 <= (-1 + -mid_i:1349)
                                 /\ 0 <= (255 + -mid_s:1350
                                            + (256
                                                 * floor((1/256 * mid_s:1350))))
                                 /\ 0 <= floor((1/256 * mid_s:1350))
                                 /\ 0 <= (mid_s:1350
                                            + (-256
                                                 * floor((1/256 * mid_s:1350))))
                                 /\ 0 <= mid_i:1349 /\ 0 <= (-1 + i':1352)
                                 /\ 0 <= s':1353 /\ 0 <= -i':1352))
                     /\ (0 = K:1351 \/ -mid_s:1350 <= 0)
                     /\ (K:1348 + K:1351) = K:1354 /\ 0 <= K:1354
                     /\ 0 <= i':1352 /\ 0 <= i':1352
                     /\ ((((s':1346 mod 256) < (s':1353 mod 256)
                             \/ (s':1353 mod 256) < (s':1346 mod 256))
                            /\ 2 = phi___retres7:1355)
                           \/ ((s':1353 mod 256) <= (s':1346 mod 256)
                                 /\ (s':1346 mod 256) <= (s':1353 mod 256)
                                 /\ 3 = phi___retres7:1355))
                     /\ (s':1318 mod 256) = phi_tmp:1298
                     /\ (s':1325 mod 256) = phi_tmp___0:1299
                     /\ (s':1332 mod 256) = phi_tmp___1:1300
                     /\ (s':1339 mod 256) = phi_tmp___2:1301
                     /\ (s':1346 mod 256) = phi_tmp___3:1303
                     /\ phi___retres7:1355 = phi___retres7:1304
                     /\ (s':1353 mod 256) = phi_return:1305
                     /\ 0 = phi_param1:1306
                     /\ type_err:1356 = phi_return@pos:1307
                     /\ type_err:1357 = phi_param0@pos:1308
                     /\ type_err:1358 = phi_param1@pos:1309
                     /\ type_err:1359 = phi_return@width:1310
                     /\ type_err:1360 = phi_param0@width:1311
                     /\ type_err:1361 = phi_param1@width:1312)))}

------------------------------------------------
Procedure summary for prefixRemoving

Base relation: 
{i := i':358
 s := s':359
 k := param1:249
 return := s':359
 return@pos := type_err:361
 return@width := type_err:362
 when ((!(0 <= K:354) \/ mid_i:355 = K:354)
         /\ (!(0 <= K:354)
               \/ (-256 * mid_s:356) <= ((-256 * param0:246) + (-255 * K:354)))
         /\ ((K:354 = 0 /\ param0:246 = mid_s:356 /\ 0 = mid_i:355)
               \/ (1 <= K:354
                     /\ 0 <= (-param0:246
                                + (-256 * floor((-1/256 * param0:246))))
                     /\ 0 <= (-1 + -param0:246) /\ 0 <= (-1 + param1:249)
                     /\ 0 <= floor((-1/256 * param0:246))
                     /\ 0 <= (255 + param0:246
                                + (256 * floor((-1/256 * param0:246))))
                     /\ 0 <= -mid_s:356 /\ 0 <= (-1 + mid_i:355)
                     /\ 0 <= (param1:249 + -mid_i:355)))
         /\ (0 = K:354 \/ !(-param0:246 <= 0))
         /\ (!(0 <= K:357) \/ i':358 = (mid_i:355 + K:357))
         /\ (!(0 <= K:357) \/ s':359 <= mid_s:356)
         /\ ((K:357 = 0 /\ mid_s:356 = s':359 /\ mid_i:355 = i':358)
               \/ (1 <= K:357 /\ 0 <= (-1 + -mid_i:355 + param1:249)
                     /\ 0 <= (255 + -mid_s:356
                                + (256 * floor((1/256 * mid_s:356))))
                     /\ 0 <= floor((1/256 * mid_s:356))
                     /\ 0 <= (mid_s:356 + (-256 * floor((1/256 * mid_s:356))))
                     /\ 0 <= mid_i:355 /\ 0 <= (-1 + i':358) /\ 0 <= s':359
                     /\ 0 <= (param1:249 + -i':358)))
         /\ (0 = K:357 \/ -mid_s:356 <= 0) /\ (K:354 + K:357) = K:360
         /\ 0 <= K:360 /\ 0 <= i':358 /\ param1:249 <= i':358)}

================================================
Assertion Checking at Error Points

================================================
Bounds on Variables

Variable bounds at line 36 in main

0 <= result
result is o(1)
result <= 3
result is O(1)

================================================
Finished!
