S2PF: speculative symbolic PathFinder