starting from <magic>
@[esp + 4, 4] := nondet as x
reach <magic> return such that al = 1 then print x
cut at <magic> return