a<=afa_NAa<=c1af
a<=a_Na_NAa<=c1c1Aapermut_allV0V0Aan_invarianta_NV0Aam_invariantc1V0Ia=alengthV0a+a_Nc1F
loop invariant init
a<V4alengthV3Aa<=c0V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
index in array bounds
apermut_allV3V0AaterminationV2V1V2V1V5V3Aa<=V2a+a_Nc1Aa<=c0V1Aan_invariantV1V3Aam_invariantV2V3Aaj_invariantV2V1V1afV5V3Aai_invariantV2V1V2afV5V3LaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
aterminationV9V8V2V1V5V10Aa<=V9V1Aa<=V9V9Aai_invariantV2V1V9V6V5V10Ia<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<V11alengthV10Aa<=c0V11IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<a-a+a_Nc1V12a-a+a_Nc1V11Aa<=c0a-a+a_Nc1V11Ia=V12a+V11c1FIa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
loop variant decrease
aterminationV12V8V2V1V5V10Aa<=V12V1Aa<=V9V12Aai_invariantV2V1V12V6V5V10Ia=V12a+V11c1FIa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
loop invariant preservation
aterminationV11V8V2V1V5V10Aa<=V2V8Aa<=V8V8Aaj_invariantV2V1V8V7V5V10INa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<V12alengthV10Aa<=c0V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<V13V12Aa<=c0V12Ia=V13a-V12c1FIa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
aterminationV11V13V2V1V5V10Aa<=V2V13Aa<=V13V8Aaj_invariantV2V1V13V7V5V10Ia=V13a-V12c1FIa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
assertion
a<V11alengthV10Aa<=c0V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<V12alengthV10Aa<=c0V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<V11alengthV10Aa<=c0V11LaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<V12alengthV15Aa<=c0V12Ia=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
aexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<a-a+a+a_Nc2V22V21a-a+a+a_Nc2V8V9Aa<=c0a-a+a+a_Nc2V8V9Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
ai_invariantV2V1V21V20V5V16Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
VC for find
aj_invariantV2V1V22V18V5V16Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
am_invariantV2V16Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
an_invariantV1V16Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<=c0V22Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<=V21a+a_Nc1Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
aterminationV21V22V2V1V5V16Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
apermut_allV16V0Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
apermut_allV16V0AaterminationV21V22V2V1V5V16Aa<=V21a+a_Nc1Aa<=c0V22Aan_invariantV1V16Aam_invariantV2V16Aaj_invariantV2V1V22V18V5V16Aai_invariantV2V1V21V20V5V16Ia=V22a-V12c1FIa=V21a+V11c1FIa=V20V19FIia=V19a+V11c1a=V19V12a<V11V12FIa=V18V17FIia=V17a-V12c1a=V17V11a<V11V12FIaexchangeV16V10V11V12Ia=V16aV15V12V13Aa=aeltsV16asetaeltsV15V12V13Ia=alengthV16alengthV15FIa=V15aV10V11V14Aa=aeltsV15asetaeltsV10V11V14Ia=alengthV15alengthV10FLaV10V12LaV10V11Ia<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<a-a+a+a_Nc2V12V11a-a+a+a_Nc2V8V9Aa<=c0a-a+a+a_Nc2V8V9INa<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
apermut_allV10V0AaterminationV11V12V2V1V5V10Aa<=V11a+a_Nc1Aa<=c0V12Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V12V7V5V10Aai_invariantV2V1V11V6V5V10INa<=V11V12Ia<=V5aV10V11Aa<=aV10V12V5INa<V5aV10V12IaterminationV11V12V2V1V5V10Aa<=V2V12Aa<=V12V8Aaj_invariantV2V1V12V7V5V10FINa<aV10V11V5IaterminationV11V8V2V1V5V10Aa<=V11V1Aa<=V9V11Aai_invariantV2V1V11V6V5V10FIa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<V8V1Aa<V2V9INa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<a-V11V2a-V1V2Aa<=c0a-V1V2Ia=V11V8FIa<=afV8Ia<V8V1Aa<V2V9INa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<=V11a_NAa<=c1V2Aapermut_allV10V0Aan_invariantV11V10Aam_invariantV2V10Ia=V11V8FIa<=afV8Ia<V8V1Aa<V2V9INa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<a-V1V11a-V1V2Aa<=c0a-V1V2Ia=V11V9FIa<=V9afINa<=afV8Ia<V8V1Aa<V2V9INa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<=V1a_NAa<=c1V11Aapermut_allV10V0Aan_invariantV1V10Aam_invariantV11V10Ia=V11V9FIa<=V9afINa<=afV8Ia<V8V1Aa<V2V9INa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<a-V11V12a-V1V2Aa<=c0a-V1V2Ia=V12afFIa=V11afFINa<=V9afINa<=afV8Ia<V8V1Aa<V2V9INa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
a<=V11a_NAa<=c1V12Aapermut_allV10V0Aan_invariantV11V10Aam_invariantV12V10Ia=V12afFIa=V11afFINa<=V9afINa<=afV8Ia<V8V1Aa<V2V9INa<=V9V8Iapermut_allV10V0AaterminationV9V8V2V1V5V10Aa<=V9a+a_Nc1Aa<=c0V8Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V8V7V5V10Aai_invariantV2V1V9V6V5V10Ia=alengthV10alengthV3FLaV3V4LafIa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
apermut_allV3V0AafoundV3INa<V2V1Ia<=V1a_NAa<=c1V2Aapermut_allV3V0Aan_invariantV1V3Aam_invariantV2V3Ia=alengthV3alengthV0FIa=alengthV0a+a_Nc1F
postcondition
iapermut_allV3V0AafoundV3iiia<=V11a_NAa<=c1V12Aapermut_allV10V0Aan_invariantV11V10Aam_invariantV12V10Aa<a-V11V12a-V1V2Aa<=c0a-V1V2Ia=V12afFIa=V11afFa<=V1a_NAa<=c1V13Aapermut_allV10V0Aan_invariantV1V10Aam_invariantV13V10Aa<a-V1V13a-V1V2Aa<=c0a-V1V2Ia=V13V9Fa<=V9afa<=V14a_NAa<=c1V2Aapermut_allV10V0Aan_invariantV14V10Aam_invariantV2V10Aa<a-V14V2a-V1V2Aa<=c0a-V1V2Ia=V14V8Fa<=afV8Aa<V8V1Aa<V2V9iiiapermut_allV10V0AaterminationV15V16V2V1V5V10Aa<=V15a+a_Nc1Aa<=c0V16Aan_invariantV1V10Aam_invariantV2V10Aaj_invariantV2V1V16V7V5V10Aai_invariantV2V1V15V6V5V10Aa<a-a+a+a_Nc2V16V15a-a+a+a_Nc2V8V9Aa<=c0a-a+a+a_Nc2V8V9apermut_allV20V0AaterminationV25V26V2V1V5V20Aa<=V25a+a_Nc1Aa<=c0V26Aan_invariantV1V20Aam_invariantV2V20Aaj_invariantV2V1V26V22V5V20Aai_invariantV2V1V25V24V5V20Aa<a-a+a+a_Nc2V26V25a-a+a+a_Nc2V8V9Aa<=c0a-a+a+a_Nc2V8V9Ia=V26a-V16c1FIa=V25a+V15c1FIa=V24V23FIia=V23a+V15c1a=V23V16a<V15V16FIa=V22V21FIia=V21a-V16c1a=V21V15a<V15V16FAaexchangeV20V10V15V16Ia=V20aV19V16V17Aa=aeltsV20asetaeltsV19V16V17Ia=alengthV20alengthV19F

1b74d55a4b2dd310ebde945ebc007bef 25H45H0
96e60fe7328b692e3845dbabe1f79eb3 2H1H0
806894a570d25d414dd19f9261e9aee5 4H3H0
6d26694aed79d0df4b1db1e389dd17a5 2H5H0
07569f85c43f3a48e580ea8fd53a3f04 2H6H0
43ef3fe4b431289e9a8f2c4391ccb215 4H7H0
76a4c508768d23ee53f2ae133b87e01d 9H8H0
896230d8128b6628c6effc64112926eb 11H10H0
1061ba1f8bd968dd372d8107d52531d2 2H12H0
2d58592cd5836bbc9ed914364cb63c86 4H13H0
cf0f620404a684a638ef0b299ea0cdf3 9H14H0
441db7c7d6ee350cecacded7de35d615 11H15H0
2039070305540c6cebedb606284bebd8 17H16H0
f4b0cf39e5ebb25ca56a9ddcb86a6e25 4H18H0
4a30f9e82377d8303e5b7f1831c3baba 4H19H0
05025a3cf67091a6940beb72066f742e 4H20H0
c4cd1ec7e5065aa3bb5a62599d3f5e38 4H21H0
a632600887fceb5eabc40668a2c9a64b 17H22H0
99e1b99c8a8b7f69fb380b2c8ff9f842 9H23H0
8b71207b9c12ab260dff29e44c7c761f 11H33H0
22556d422761da1e16c37c729c366544 25H24H0
40df9962af8102c3b15427089c88e9db 25H26H0
4f66423e36db370102229a5932a1e286 25H27H0
21c9a91936cabae41607cbbe3f32120b 25H28H0
b1ea81e5fce9327b5c2e5784593392da 25H29H0
e44c15d19c4ac734b9a32f987c35edeb 25H30H0
2ea3145243b891594e4598fba484eb9c 25H31H0
0b56efeaa7c592d8ca20fc04ce2d1bd1 25H32H0
b7ea03e6a373d4ff4b569455f98cb866 9H34H0
e86737a2bc99ab56efa45190ae9be57f 11H35H0
2acc53e60e215607e5610eb1075ee254 17H36H0
7d68cc524f5c1ebb5f0295a9c0878c28 9H37H0
f9844bc258f4d792b97b122c408dd853 11H38H0
8fc25a1afc1750bec26ad6adf14e298b 9H39H0
b74a3aca5e4c46b54abc6dea289f0dd9 11H40H0
c97adf993de8ae3adacb44bb89a87264 9H41H0
1b8e334c8bc4b703e3c5a9a63f1b32e8 11H42H0
9ad008689041763b7e13625c97f79b59 44H43H0
